{"id":"ROOT-APP-PYPI-CVE-2026-111066","summary":"CVE-2026-111066 in aiohttp - Patched by Root","details":"Root has patched CVE-2026-111066 in the aiohttp package for Root:PyPI. Multiple fixed versions available.","modified":"2026-10-26T13:15:05.128938685Z","published":"2026-10-26T12:44:26Z","upstream":["CVE-2026-111066"],"database_specific":{"distro":"pypi","distro_version":"","severity":"HIGH","source":"Root"},"affected":[{"package":{"name":"aiohttp","ecosystem":"Root:PyPI"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.3+aikido.1"},{"fixed":"3.14.0+aikido.6"},{"fixed":"3.8.6+aikido.15"}]}],"database_specific":{"root_patch_version":"aikido.15","root_patched":true,"source":"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-111066.json","total_fixed_versions":3,"upstream_version":"3.8.6","all_fixed_versions":["3.14.3+aikido.1","3.14.0+aikido.6","3.8.6+aikido.15"]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}