chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v3.14.3 [SECURITY] by renovate-bot · Pull Request #595 · GoogleCloudPlatform/cloud-solutions

renovate-bot · 2026-07-07T14:35:32Z

This PR contains the following updates:

Package	Change	Age	Confidence
aiohttp	`3.14.1` → `3.14.3`
h2	`4.3.0` → `4.4.1`
httplib2	`0.31.2` → `0.32.0`
pyasn1 (changelog)	`0.6.3` → `0.6.4`

AIOHTTP: HTTP request smuggling via WebSocket upgrade

CVE-2026-69243 / GHSA-mfx4-hv73-q22v / PYSEC-2026-3546

More information

Details

Summary

The HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades.

Impact

If using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unaware of any public exploit code.

Patch: aio-libs/aiohttp@6ae358f

Severity

CVSS Score: 6.3 / 10 (Medium)
Vector String: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate

CVE-2026-59881 / GHSA-mq44-7p77-q5h7 / PYSEC-2026-3547

More information

Details

Summary

The client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated.

Impact

A client may unexpectedly decompress WebSocket frames when explicitly opted out. This could lead to additional CPU/memory consumption, but is unlikely to be a significant issue unless a zip bomb vulnerability or similar is also present.

Patch: aio-libs/aiohttp@47fb6ae

Severity

CVSS Score: 6.9 / 10 (Medium)
Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: HTTP request smuggling via WebSocket upgrade

CVE-2026-69243 / GHSA-mfx4-hv73-q22v / PYSEC-2026-3546

More information

Details

Summary

The HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades.

Impact

If using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unaware of any public exploit code.

Patch: aio-libs/aiohttp@6ae358f

Severity

CVSS Score: 6.3 / 10 (Medium)
Vector String: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

References

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate

CVE-2026-59881 / GHSA-mq44-7p77-q5h7 / PYSEC-2026-3547

More information

Details

Summary

The client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated.

Impact

A client may unexpectedly decompress WebSocket frames when explicitly opted out. This could lead to additional CPU/memory consumption, but is unlikely to be a significant issue unless a zip bomb vulnerability or similar is also present.

Patch: aio-libs/aiohttp@47fb6ae

Severity

CVSS Score: 6.9 / 10 (Medium)
Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

CVE-2026-69244 / GHSA-cq5v-8q36-5273 / PYSEC-2026-3545

More information

Details

Summary

An out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response.

Impact

An attacker controlled server, or possibly an accidental response could trigger a DoS in the client.

Workaround

If unable to upgrade, the Python parser is unaffected and can be used with AIOHTTP_NO_EXTENSIONS=1.

Patch: aio-libs/aiohttp@49f65d5

Severity

CVSS Score: 7.1 / 10 (High)
Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

CVE-2026-69244 / GHSA-cq5v-8q36-5273 / PYSEC-2026-3545

More information

Details

Summary

An out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response.

Impact

An attacker controlled server, or possibly an accidental response could trigger a DoS in the client.

Workaround

If unable to upgrade, the Python parser is unaffected and can be used with AIOHTTP_NO_EXTENSIONS=1.

Patch: aio-libs/aiohttp@49f65d5

Severity

CVSS Score: 7.1 / 10 (High)
Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

h2: Duplicate Host header could facilitate request smuggling

CVE-2026-71554 / GHSA-6hr6-w5qg-qmwg

More information

Details

Impact

h2 <=4.4.0 accepts request header blocks containing more than one Host header, and forwards every Host header to the consuming application. Where the consumer downgrades HTTP/2 to HTTP/1.1, the resulting request carries two Host header lines, which is a request smuggling primitive (CWE-444).

Patches

Patched and fixed in v4.4.1

Workarounds

Users of the h2 library are advised to check and follow HTTP semantics best practices in their application code. h2 provides best effort sanity checks, but ultimately the calling code is responsible to ensure proper and safe usage of HTTP/2 as provided by h2, hyperframe, and hpack.

References

Similar to the previously disclosed and fixed duplicate content-length issue.

Severity

CVSS Score: 5.3 / 10 (Medium)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling

CVE-2026-59939 / GHSA-j5g9-f88f-gfj3 / PYSEC-2026-3444

More information

Details

Summary

The httplib2 HTTP client library performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate. A malicious or compromised HTTP server can return a small compressed payload (approximately 150 KB) that expands to an arbitrarily large size in memory (150 MB or more), causing MemoryError or OOM-kill in the client process. This is a classic decompression bomb (zip bomb) attack against the HTTP client.

Any application using httplib2.Http().request() against untrusted or attacker-controlled HTTP endpoints is affected.

Details

Affected code: httplib2/__init__.py - _decompressContent() function

The decompression path has two unbounded operations:

gzip decompression (line 394):
```
content = gzip.GzipFile(fileobj=io.BytesIO(new_content)).read()
```
The .read() call with no size argument decompresses the entire gzip payload into a single in-memory bytes object. There is no limit on the decompressed size.
deflate decompression (line 397):
```
content = zlib.decompress(content, zlib.MAX_WBITS)
```
Similarly, zlib.decompress() returns the fully decompressed content as a single bytes object with no size bound.
Automatic invocation (line 1431): _decompressContent() is called automatically on every HTTP response that includes a Content-Encoding: gzip or deflate header. The full compressed body is already buffered in memory via response.read() before decompression begins.

Root cause: There is no max_decompressed_size, streaming decompression with size tracking, or decompression ratio check anywhere in the decompression path. The library unconditionally trusts the server's compressed payload size.

Attack vector: Any HTTP server (including man-in-the-middle attackers or compromised upstream services) can trigger this by returning a response with:

Content-Encoding: gzip header
A small compressed body that decompresses to an arbitrarily large size

Proof of Concept

Step 1 - Start a malicious HTTP server that serves a gzip decompression bomb:

#!/usr/bin/env python3
"""Malicious HTTP server that serves a gzip decompression bomb."""
import gzip
import http.server
import io
import socketserver

UNCOMPRESSED_SIZE = 150 * 1024 * 1024  # 150 MB

def make_payload():
    """Create a gzip payload: ~150 KB compressed -> 150 MB decompressed."""
    buf = io.BytesIO()
    with gzip.GzipFile(fileobj=buf, mode="wb", compresslevel=9) as gz:
        chunk = b"A" * (1024 * 1024)  # 1 MB of repeating bytes
        for _ in range(UNCOMPRESSED_SIZE // len(chunk)):
            gz.write(chunk)
    return buf.getvalue()

PAYLOAD = make_payload()

class Handler(http.server.BaseHTTPRequestHandler):
    def do_GET(self):
        self.send_response(200)
        self.send_header("Content-Type", "application/octet-stream")
        self.send_header("Content-Encoding", "gzip")
        self.send_header("Content-Length", str(len(PAYLOAD)))
        self.end_headers()
        self.wfile.write(PAYLOAD)
    def log_message(self, fmt, *args):
        pass

with socketserver.TCPServer(("127.0.0.1", 8000), Handler) as httpd:
    print(f"Bomb server ready: {len(PAYLOAD)} bytes compressed -> "
          f"{UNCOMPRESSED_SIZE} bytes decompressed")
    httpd.serve_forever()

Step 2 - Run the httplib2 client (in a separate terminal):

#!/usr/bin/env python3
"""Client that demonstrates MemoryError from httplib2 decompression bomb."""
import resource
import httplib2

##### Set a 180 MB memory limit to make the crash deterministic
LIMIT_MB = 180
limit = LIMIT_MB * 1024 * 1024
resource.setrlimit(resource.RLIMIT_AS, (limit, limit))

http = httplib2.Http(timeout=5)
try:
    response, content = http.request("http://127.0.0.1:8000/")
    print(f"Unexpected success: received {len(content)} bytes")
except MemoryError:
    print(f"MemoryError confirmed: decompression bomb exhausted "
          f"{LIMIT_MB} MB memory limit")
    # This is the expected outcome - the 150 KB compressed payload
    # expanded to 150 MB during decompression, exceeding the limit.

Expected output (client):

MemoryError confirmed: decompression bomb exhausted 180 MB memory limit

Reproduction metrics:

Compressed payload size: 152,908 bytes (~150 KB)
Decompressed size: 157,286,400 bytes (150 MB)
Amplification ratio: ~1,029x
Client memory limit: 180 MB -> MemoryError triggered during gzip.GzipFile.read()

Impact

Severity: High

Any application using httplib2 to make HTTP requests to untrusted servers is vulnerable. The attack requires no authentication, no special configuration, and no user interaction - the server simply returns a crafted gzip-compressed response.

Parameter	Value
Compressed payload	~150 KB
Decompressed size	150 MB (configurable by attacker)
Amplification ratio	~1,029x
Authentication required	None
User interaction required	None
Prerequisites	Client makes any HTTP request to attacker-controlled server

Real-world scenarios:

Web scrapers/crawlers that fetch pages from untrusted URLs
API clients connecting to third-party services
Webhook handlers that follow redirects to attacker-controlled endpoints
CI/CD pipelines that download dependencies or artifacts over HTTP
Any MITM attacker on an unencrypted HTTP connection can inject the compressed payload

Impact scaling: The attacker can create arbitrarily large decompression bombs. A 1 MB compressed payload can decompress to several gigabytes, guaranteeing OOM-kill on virtually any system. The attack is fully deterministic and requires only a single HTTP response.

Downstream exposure: httplib2 is a widely used Python HTTP client library with millions of downloads. It is a dependency of Google's API client libraries (google-api-python-client, google-auth-httplib2), meaning applications using Google Cloud APIs may be indirectly affected if they process responses from untrusted intermediaries.

Credit

Found by a security research team from the University of Sydney, focusing on detecting open source software vulnerabilities.
Liyi Zhou: https://lzhou1110.github.io/
Ziyue Wang: https://zyy0530.github.io/
Strick: https://str1ckl4nd.github.io/
Maurice: https://maurice.busystar.org/
Chenchen Yu: https://7thparkk.github.io/

Severity

CVSS Score: 7.5 / 10 (High)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

CVE-2026-59939 / GHSA-j5g9-f88f-gfj3 / PYSEC-2026-3444

More information

Details

httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate in _decompressContent in httplib2/init.py, allowing a malicious or compromised HTTP server to return a small compressed payload that expands to an arbitrarily large size in memory and causes MemoryError or OOM-kill in the client process. This issue is fixed in version 0.32.0.

Severity

CVSS Score: 7.5 / 10 (High)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service

CVE-2026-59885 / GHSA-8ppf-4f7h-5ppj / PYSEC-2026-3456

More information

Details

Impact

The BER/CER/DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. A small crafted payload (tens of kilobytes) containing an OID with many arcs consumes seconds of CPU per decode() call, allowing denial of service in any application that decodes untrusted ASN.1 data (certificates, LDAP, SNMP, Kerberos, etc.). The corresponding encoders have the same quadratic behavior, reachable when an application re-encodes previously decoded attacker-supplied values.

The arc-size limit introduced for CVE-2026-23490 bounds the byte length of an individual arc but not the number of arcs, so it does not mitigate this issue.

Affected components

ObjectIdentifierPayloadDecoder and RelativeOIDPayloadDecoder in pyasn1/codec/ber/decoder.py; ObjectIdentifierEncoder and RelativeOIDEncoder in pyasn1/codec/ber/encoder.py. The CER and DER codecs inherit these and are equally affected.

Patches

Fixed in pyasn1 0.6.4: arc accumulation in both decoders and encoders now runs in linear time.

Workarounds

Limit the size of untrusted ASN.1 input before decoding.

Severity

CVSS Score: 7.5 / 10 (High)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

pyasn1: Uncontrolled resource consumption when converting decoded REAL values

CVE-2026-59886 / GHSA-hm4w-wwcw-mr6r / PYSEC-2026-3457

More information

Details

Impact

The univ.Real type converted its (mantissa, base, exponent) value to a Python float using exact big-integer exponentiation. A BER/CER/DER-encoded REAL value only a few bytes long can carry a very large exponent, causing this computation to attempt to materialize an astronomically large integer.

Any operation that triggers float conversion on such a decoded value — prettyPrint(), str(), comparison, arithmetic, or an explicit float() call — consumes excessive CPU and memory, hanging the process. Applications that decode untrusted ASN.1 data and then print, log, or compare the decoded objects are vulnerable to denial of service. Decoding alone does not trigger the issue.

Affected components

pyasn1.type.univ.Real — float conversion (float() and everything built on it: prettyPrint(), str(), comparisons, arithmetic, int())
Reachable through the pyasn1.codec.ber, cer, and der decoders, which produce Real objects from untrusted input; also via directly constructed Real values

The encoders and the native codec are not affected. Applications that never handle ASN.1 REAL values are not affected.

Patches

Fixed in pyasn1 0.6.4. Binary (base-2) values are now converted with math.ldexp(), and decimal (base-10) values with exponents beyond float range raise OverflowError without constructing huge intermediate integers. Existing behavior is preserved: out-of-range values raise OverflowError and prettyPrint() renders them as .

Workarounds

Avoid converting, printing, or comparing decoded Real objects from untrusted sources; inspect the raw (mantissa, base, exponent) tuple instead.

Severity

CVSS Score: 7.5 / 10 (High)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs

CVE-2026-59884 / GHSA-m4p7-r5rc-7g4j / PYSEC-2026-3455

More information

Details

Impact

The BER decoder (shared by the CER and DER codecs) parses long-form tags by accumulating continuation octets in a loop with no upper bound on the size of the tag ID. A crafted input can force the decoder to build an arbitrarily large integer, with CPU cost growing quadratically in input size — a ~1 MB input consumes over a minute of CPU. On Python 3.11+, the oversized tag ID can also trigger an unhandled ValueError (integer string conversion limit) while the decoder formats error messages, violating the documented PyAsn1Error contract and potentially bypassing caller error handling.

Any application decoding untrusted BER/CER/DER input is affected.

Affected components

pyasn1.codec.ber.decoder — decode() and StreamingDecoder
pyasn1.codec.cer.decoder and pyasn1.codec.der.decoder, which inherit
the same tag parsing
pyasn1.type.tag — Tag/TagSet reprs could raise ValueError when
rendering oversized tag IDs (reachable through decoder error paths)

The encoders and the pyasn1.codec.native codec are not affected.

Patches

Fixed in 0.6.4. Long-form tag IDs are now limited to 20 octets (140-bit tag IDs, matching the existing OID arc limit); oversized tags are rejected with PyAsn1Error. Tag ID rendering in reprs and error messages was additionally hardened against the interpreter's integer-to-string conversion limit.

Workarounds

Bound the size of untrusted input passed to decode() before calling it.

Severity

CVSS Score: 7.5 / 10 (High)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

CVE-2026-59884 / GHSA-m4p7-r5rc-7g4j / PYSEC-2026-3455

More information

Details

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with CPU cost growing quadratically and to trigger unhandled ValueError exceptions in Python 3.11+ error formatting paths. Any application decoding untrusted BER, CER, or DER input is affected. This issue is fixed in version 0.6.4.

Severity

CVSS Score: 7.5 / 10 (High)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

CVE-2026-59885 / GHSA-8ppf-4f7h-5ppj / PYSEC-2026-3456

More information

Details

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consumes excessive CPU per decode() call and can deny service to applications that decode untrusted ASN.1 data. The corresponding encoders have the same quadratic behavior when an application re-encodes previously decoded attacker-supplied values. This issue is fixed in version 0.6.4.

Severity

CVSS Score: 7.5 / 10 (High)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

CVE-2026-59886 / GHSA-hm4w-wwcw-mr6r / PYSEC-2026-3457

More information

Details

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded objects. This issue is fixed in version 0.6.4.

Severity

CVSS Score: 7.5 / 10 (High)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

Release Notes

aio-libs/aiohttp (aiohttp)

`v3.14.3`

Compare Source

===================

Bug fixes

Fixed the client dropping only the first Authorization, Cookie and
Proxy-Authorization header when a redirect crossed an origin -- by :user:arshsmith1.

Related issues and pull requests on GitHub:
:issue:13180.
Fixed error message construction in the C HTTP parser -- by :user:bdraco.

Related issues and pull requests on GitHub:
:issue:13222.

`v3.14.2`

Compare Source

===================

Bug fixes

Fixed :py:attr:~aiohttp.web.StreamResponse.last_modified rounding a
:class:datetime.datetime with a fractional second down.

Related issues and pull requests on GitHub:
:issue:5303.
Fixed resolving localhost on Windows to fall back without AI_ADDRCONFIG
when the first lookup fails, so localhost still works without an active
network.

Related issues and pull requests on GitHub:
:issue:5357.
Rejected multipart body parts whose Content-Length header is not a
plain sequence of digits (e.g. +5, -1, 1_0), matching the
strictness of the main request parser per :rfc:9110#section-8.6
-- by :user:dxbjavid.

Related issues and pull requests on GitHub:
:issue:12794.
Fixed GunicornWebWorker endlessly reloading when app fails during startup -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub:
:issue:12879.
Fixed some inconsistent case sensitivity on request methods -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub:
:issue:12931.
Fixed IndexError: string index out of range in parse_content_disposition
when a header parameter has an empty value (e.g. filename=).
-- by :user:JSap0914.

Related issues and pull requests on GitHub:
:issue:12948.
Fixed the sock_read timeout being re-armed on a keep-alive connection after
it had been returned to the pool. An idle pooled connection could be left with a
pending read timeout that fired and poisoned it, so the next request reusing the
connection failed immediately with :exc:aiohttp.SocketTimeoutError. The read
timeout is now only rescheduled when resuming a transport that was actually
paused -- by :user:daragok.

Related issues and pull requests on GitHub:
:issue:12953, :issue:12954.
Fixed the client decompressing frames when permessage-deflate was not negotiated -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub:
:issue:12976.
Fixed DigestAuthMiddleware raising an IndexError on empty domain -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub:
:issue:12983.
Fixed :class:~aiohttp.DigestAuthMiddleware corrupting the Digest
challenge when a WWW-Authenticate response offered more than one
authentication scheme -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub:
:issue:12984.
Fixed client not closing cleanly after an exception -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub:
:issue:12985.
Fixed control frames breaking fragmented WebSocket messages -- by :user:arshsmith1.

Related issues and pull requests on GitHub:
:issue:12988.
Fixed parse_content_disposition rejecting otherwise-valid
Content-Disposition header values that contain optional whitespace (OWS)
around the disposition type (e.g. "form-data ; name=\"field\"").
The disposition type is now stripped before token validation, consistent with
how parameter keys are already handled -- by :user:JSap0914.

Related issues and pull requests on GitHub:
:issue:12996.
Fixed an :exc:IndexError in the pure-Python HTTP parser -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub:
:issue:13001.
Fixed parsing optional whitespace in Content-Disposition -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub:
:issue:13002.
Fixed request body not being read on rejected WebSocket upgrades -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub:
:issue:13016.
Fixed :exc:LookupError (and an unguarded :exc:UnicodeDecodeError) escaping
Content-Disposition parsing when a multipart part supplies an extended
parameter with an unknown charset
-- by :user:arshsmith1.

Related issues and pull requests on GitHub:
:issue:13042.
Fixed escape_quotes in the Digest authentication middleware not escaping
backslashes, so a WWW-Authenticate challenge value containing a backslash
could break out of its quoted-string in the generated Authorization header
-- by :user:dxbjavid.

Related issues and pull requests on GitHub:
:issue:13054.
Fixed Python parser not rejecting a bare LF in the request line -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub:
:issue:13136.
Fixed the C HTTP parser folding the fragment into the query string for an
origin-form request target with an empty query (e.g. /path?#frag),
which diverged from the pure-Python parser -- by :user:GiulioDER.

Related issues and pull requests on GitHub:
:issue:13171.
Fixed the C parser reporting newer HTTP methods such as QUERY as <unknown>;
the method table is now derived from the vendored llhttp instead of a hand-maintained count
-- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub:
:issue:13174.

Packaging updates and notes for downstreams

Upgraded llhttp to v9.4.2 -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub:
:issue:12956.

Contributor-facing changes

Added admin documentation on incident response and on running reproducer code
safely, covering security vulnerability handling and supply-chain, account, and
CI/infrastructure compromise -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub:
:issue:12914.

python-hyper/h2 (h2)

`v4.4.1`

Compare Source

Bugfixes

Performance improvement: remove consumed frames in-place from data buffer.
Reject duplicate Host headers in request headers. Thanks to Sunand Mohan for the report.

`v4.4.0`

Compare Source

API Changes (Backward Incompatible)

Support for Python 3.9 has been removed.
Support for PyPy 3.9 has been removed.
Stream.end_stream() now raises NoSuchStreamError or StreamClosedError exceptions, instead of a generic KeyError.
Duplicate content-length headers with different values now raise ProtocolError.
Previously, the first content-length header was accepted and later conflicting values were ignored. Thanks to Harshal Parekh for the report.
Parse content-length headers according to RFC9110 grammar for numbers (1*DIGIT). Thanks to Arkadiusz Marta for the report.
backfill from v4.3.0 Convert emitted events into Python dataclass, which introduces new constructors with required arguments.
Instantiating these events without arguments, as previously commonly used API pattern, will no longer work.

API Changes (Backward Compatible)

Support for Python 3.14 has been added.
H2Connection.receive_data now accepts any byte-like object that
implements the buffer protocol, such as bytes, bytearray, and
memoryview. Existing bytes callers are unaffected.
Align CONNECT pseudo-header validation with RFC 9113 s8.3 and RFC 8441 s4.
Ordinary CONNECT now requires :method=CONNECT and :authority, and
forbids :scheme/:path. Extended CONNECT (e.g., WebSocket) requires
:scheme, :path, :authority plus :protocol. (PR #1309)
Fix incorrect substring matching of secure header in cookie and :method.

Bugfixes

Fix to allow sending 0 bytes on a stream even if the flow control window is negative.
Reject non-zero SETTINGS_ENABLE_PUSH values received from servers.

httplib2/httplib2 (httplib2)

`v0.32.0`

Compare Source

pyasn1/pyasn1 (pyasn1)

`v0.6.4`

Compare Source

CVE-2026-59885 (GHSA-8ppf-4f7h-5ppj): Fixed quadratic time
complexity in the OBJECT IDENTIFIER and RELATIVE-OID decoders.
A small crafted substrate encoding many arcs could consume
excessive CPU. Arcs are now accumulated in linear time; decoded
values are unchanged (thanks for reporting, tynus2)
CVE-2026-59884 (GHSA-m4p7-r5rc-7g4j): Limited BER long-form tag
IDs to 20 octets (140 bits), matching the OID arc limit introduced
in 0.6.2. Unbounded tag IDs allowed a crafted substrate to consume
excessive CPU and memory; longer tag IDs are now rejected with
PyAsn1Error. Also fixed Tag and TagSet repr() failing on huge tag
(thanks for reporting, mikeappsec)
IDs due to the integer-to-string conversion limit (Python 3.11+)
CVE-2026-59886 (GHSA-hm4w-wwcw-mr6r): Fixed excessive memory and
CPU consumption in Real.float() for values with large base-10
exponents. Conversion no longer materializes huge intermediate
integers; values too large to represent as a Python float raise
OverflowError promptly, and prettyPrint() renders them as
'' as before. Also fixed base-10 mantissa normalization
to use exact integer arithmetic; mantissas larger than 2**53
could previously lose precision through float division
(thanks for reporting, gvozdila)
Pinned PyPI publish GitHub Action to an immutable commit
pr #113

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

…2.3.0 [SECURITY]

forking-renovate · 2026-07-14T14:01:31Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: projects/dataflow-gcs-to-alloydb/requirements.txt

Command failed: uv pip compile --generate-hashes --python-version=3.13 --prerelease=allow --output-file=requirements.txt requirements.in --upgrade-package=aiohttp==3.14.3 --upgrade-package=h2==4.4.1 --upgrade-package=httplib2==0.32.0 --upgrade-package=pyasn1==0.6.4
  × No solution found when resolving dependencies:
  ╰─▶ Because apache-beam==2.74.0 depends on httplib2>=0.8,<0.32.0 and
      httplib2==0.32.0, we can conclude that apache-beam==2.74.0 cannot be
      used.
      And because you require apache-beam[gcp]==2.74.0, we can conclude that
      your requirements are unsatisfiable.

File name: projects/dataflow-gcs-to-alloydb/requirements-dev.txt

Command failed: uv pip compile --generate-hashes --python-version=3.13 --prerelease=allow --output-file=requirements-dev.txt requirements-dev.in --upgrade-package=aiohttp==3.14.3 --upgrade-package=h2==4.4.1 --upgrade-package=httplib2==0.32.0 --upgrade-package=pyasn1==0.6.4
  × No solution found when resolving dependencies:
  ╰─▶ Because apache-beam==2.74.0 depends on httplib2>=0.8,<0.32.0 and
      httplib2==0.32.0, we can conclude that apache-beam==2.74.0 cannot be
      used.
      And because you require apache-beam[gcp]==2.74.0, we can conclude that
      your requirements are unsatisfiable.

…v0.32.0 [SECURITY] Import of github PR #595 from renovate-bot #595 > ℹ️ **Note** > > This PR body was truncated due to platform limits. This PR contains the following updates: [httplib2](https://redirect.github.com/httplib2/httplib2): `0.31.2` → `0.32.0` [pillow](https://redirect.github.com/python-pillow/Pillow): `12.2.0` → `12.3.0` --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/73) for more information. --- ### [CVE-2026-59939](https://nvd.nist.gov/vuln/detail/CVE-2026-59939) / [GHSA-j5g9-f88f-gfj3](https://redirect.github.com/advisories/GHSA-j5g9-f88f-gfj3) / PYSEC-2026-3444 --- ### Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading BIT-pillow-2026-55379 / [CVE-2026-55379](https://nvd.nist.gov/vuln/detail/CVE-2026-55379) / [GHSA-45hq-cxwh-f6vc](https://redirect.github.com/advisories/GHSA-45hq-cxwh-f6vc) / PYSEC-2026-2255 --- ### Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path BIT-pillow-2026-55798 / [CVE-2026-55798](https://nvd.nist.gov/vuln/detail/CVE-2026-55798) / [GHSA-4x4j-2g7c-83w6](https://redirect.github.com/advisories/GHSA-4x4j-2g7c-83w6) / PYSEC-2026-2257 --- ### Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()` BIT-pillow-2026-54060 / [CVE-2026-54060](https://nvd.nist.gov/vuln/detail/CVE-2026-54060) / [GHSA-5x94-69rx-g8h2](https://redirect.github.com/advisories/GHSA-5x94-69rx-g8h2) / PYSEC-2026-2254 --- ### Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files) BIT-pillow-2026-54058 / [CVE-2026-54058](https://nvd.nist.gov/vuln/detail/CVE-2026-54058) / [GHSA-62p4-gmf7-7g93](https://redirect.github.com/advisories/GHSA-62p4-gmf7-7g93) --- ### Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow BIT-pillow-2026-59199 / [CVE-2026-59199](https://nvd.nist.gov/vuln/detail/CVE-2026-59199) / [GHSA-6r8x-57c9-28j4](https://redirect.github.com/advisories/GHSA-6r8x-57c9-28j4) / PYSEC-2026-3451 --- ### Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading BIT-pillow-2026-54059 / [CVE-2026-54059](https://nvd.nist.gov/vuln/detail/CVE-2026-54059) / [GHSA-8v84-f9pq-wr9x](https://redirect.github.com/advisories/GHSA-8v84-f9pq-wr9x) / PYSEC-2026-2253 --- ### Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch BIT-pillow-2026-59205 / [CVE-2026-59205](https://nvd.nist.gov/vuln/detail/CVE-2026-59205) / [GHSA-9hw9-ch79-4vh6](https://redirect.github.com/advisories/GHSA-9hw9-ch79-4vh6) / PYSEC-2026-3453 --- ### Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images BIT-pillow-2026-59198 / [CVE-2026-59198](https://nvd.nist.gov/vuln/detail/CVE-2026-59198) / [GHSA-fj7v-r99m-22gq](https://redirect.github.com/advisories/GHSA-fj7v-r99m-22gq) <details> <summary>More information</summary> #### Details ##### Summary Pillow's TGA RLE encoder reads past its row buffer when saving a mode `"1"` image. Adjacent process heap bytes can be copied into the generated TGA file. The bug is reachable through the public save API: ```python im.save(out, format="TGA", compression="tga_rle") ``` Older affected Pillow versions use the equivalent public option `rle=True`. For mode `"1"`, Pillow allocates a packed row buffer of `ceil(width / 8)` bytes, but `ImagingTgaRleEncode()` treats the row as one full byte per pixel. The maximum valid TGA width is `65535`. At that width: ```text allocated packed row buffer: 8192 bytes encoder byte-offset walk: 65535 bytes maximum OOB window per row: 57343 bytes ``` On non-ASAN Pillow `12.2.0`, the public-only maximum-width PoC below serialized `57297` bytes from distinct out-of-bounds source offsets into one returned TGA, covering `99.92%` of the maximum adjacent heap window. No heap grooming, ctypes, private API, or malformed input file was used. The disclosure is emitted across many TGA packet payload copies of at most `128` bytes each, not one large `memcpy()`. ##### Details `src/PIL/TgaImagePlugin.py` allows mode `"1"` TGA output and selects the `tga_rle` encoder when RLE compression is requested. `src/encode.c:_setimage()` allocates the row buffer using the packed-bit formula: ```c state->bytes = (state->bits * state->xsize + 7) / 8; state->buffer = (UINT8 *)calloc(1, state->bytes); ``` For mode `"1"`, `state->bits == 1`. `src/libImaging/TgaRleEncode.c` then computes: ```c bytesPerPixel = (state->bits + 7) / 8; ``` This becomes `1`, and the encoder uses pixel indexes as byte offsets: ```c static int comparePixels(const UINT8 *buf, int x, int bytesPerPixel) { buf += x * bytesPerPixel; return memcmp(buf, buf + bytesPerPixel, bytesPerPixel) == 0; } ``` The packet payload `memcpy()` later copies those out-of-bounds source bytes into the output. Raw packets copy up to `128` contiguous bytes, while RLE packets copy one representative byte: ```c memcpy( dst, state->buffer + (state->x * bytesPerPixel - state->count), flushCount ); ``` A width-2 mode `"1"` image allocates one row byte and already triggers an ASAN heap-buffer-overflow read. Wider images increase the adjacent heap window and the amount of heap data that can be serialized. ##### PoC ##### Minimal ASAN trigger ```python import io from PIL import Image out = io.BytesIO() Image.new("1", (2, 1)).save(out, format="TGA", compression="tga_rle") ``` Observed on local Pillow `12.3.0.dev0` ASAN target: ```text ERROR: AddressSanitizer: heap-buffer-overflow READ of size 1 comparePixels /out/src/src/libImaging/TgaRleEncode.c:10 ImagingTgaRleEncode /out/src/src/libImaging/TgaRleEncode.c:81 0 bytes after a 1-byte allocation from _setimage ``` ##### Maximum-width heap disclosure This PoC uses one maximum-width row. It parses the generated TGA packets and extracts only payload bytes whose source offsets were outside the allocated packed row. Rows are avoided because they mostly repeat the same adjacent heap window. Run the following with a standard affected Pillow installation. ```python import hashlib import io import PIL from PIL import Image WIDTH = 65535 ATTEMPTS = 20 ROW_BYTES = (WIDTH + 7) // 8 MAX_OOB_WINDOW = WIDTH - ROW_BYT > ✂ **Note** > > PR body was truncated to here. --- ### Commit Message(s): -- Change 1 of 1 by Mend Renovate <bot@renovateapp.com>: chore(deps): [dataflow-gcs-to-alloydb] Update dependency pillow to v12.3.0 [SECURITY] GitOrigin-RevId: 90d79fd93cfd019bb1e7ee7dd23110c14611e476 Change-Id: I6005716367fb382a32d9d8c46aad8eff86cdfada

renovate-bot requested a review from zunhoyi as a code owner July 7, 2026 14:35

forking-renovate Bot added dependencies Pull requests that update a dependency file p0 SECURITY labels Jul 7, 2026

renovate-bot force-pushed the renovate/dataflow-gcs-to-alloydb-vulnerabilityalerts branch from 068a207 to 8f4eb22 Compare July 7, 2026 14:40

ferrarimarco assigned zunhoyi Jul 7, 2026

renovate-bot force-pushed the renovate/dataflow-gcs-to-alloydb-vulnerabilityalerts branch 5 times, most recently from 1401c53 to a87ef12 Compare July 13, 2026 13:07

chore(deps): [dataflow-gcs-to-alloydb] Update dependency pillow to v1…

48f2d3d

…2.3.0 [SECURITY]

renovate-bot force-pushed the renovate/dataflow-gcs-to-alloydb-vulnerabilityalerts branch from a87ef12 to 48f2d3d Compare July 13, 2026 15:18

renovate-bot changed the title ~~chore(deps): [dataflow-gcs-to-alloydb] Update dependency pillow to v12.3.0 [SECURITY]~~ chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v0.32.0 [SECURITY] Jul 14, 2026

renovate-bot changed the title ~~chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v0.32.0 [SECURITY]~~ chore(deps): [dataflow-gcs-to-alloydb] Update dependency httplib2 to v0.32.0 [SECURITY] Jul 21, 2026

renovate-bot changed the title ~~chore(deps): [dataflow-gcs-to-alloydb] Update dependency httplib2 to v0.32.0 [SECURITY]~~ chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v0.32.0 [SECURITY] Jul 22, 2026

renovate-bot changed the title ~~chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v0.32.0 [SECURITY]~~ chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v3.14.2 [SECURITY] Jul 24, 2026

renovate-bot changed the title ~~chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v3.14.2 [SECURITY]~~ chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v0.32.0 [SECURITY] Jul 24, 2026

renovate-bot changed the title ~~chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v0.32.0 [SECURITY]~~ chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v3.14.2 [SECURITY] Jul 27, 2026

renovate-bot changed the title ~~chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v3.14.2 [SECURITY]~~ chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v3.14.3 [SECURITY] Jul 28, 2026

renovate-bot changed the title ~~chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v3.14.3 [SECURITY]~~ chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v0.32.0 [SECURITY] Jul 28, 2026

renovate-bot changed the title ~~chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v0.32.0 [SECURITY]~~ chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v3.14.3 [SECURITY] Aug 4, 2026

Navigation Menu

Uh oh!

chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v3.14.3 [SECURITY] - #595

chore(deps): [dataflow-gcs-to-alloydb] Update vulnerabilityAlerts to v3.14.3 [SECURITY]#595
renovate-bot wants to merge 1 commit into
GoogleCloudPlatform:mainfrom
renovate-bot:renovate/dataflow-gcs-to-alloydb-vulnerabilityalerts

renovate-bot commented Jul 7, 2026 •

edited

Loading

Uh oh!

forking-renovate Bot commented Jul 14, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate-bot commented Jul 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

AIOHTTP: HTTP request smuggling via WebSocket upgrade

Details

Summary

Impact

Severity

References

AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate

Details

Summary

Impact

Severity

References

AIOHTTP: HTTP request smuggling via WebSocket upgrade

Details

Summary

Impact

Severity

References

AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate

Details

Summary

Impact

Severity

References

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

Details

Summary

Impact

Workaround

Severity

References

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

Details

Summary

Impact

Workaround

Severity

References

h2: Duplicate Host header could facilitate request smuggling

Details

Impact

Patches

Workarounds

References

Severity

References

httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling

Details

Summary

Details

Proof of Concept

Impact

Credit

Severity

References

CVE-2026-59939 / GHSA-j5g9-f88f-gfj3 / PYSEC-2026-3444

Details

Severity

References

pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service

Details

Impact

Affected components

Patches

Workarounds

Severity

References

pyasn1: Uncontrolled resource consumption when converting decoded REAL values

Details

Impact

Affected components

Patches

Workarounds

Severity

References

pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs

renovate-bot commented Jul 7, 2026 •

edited

Loading

`v3.14.3`

`v3.14.2`

`v4.4.1`

`v4.4.0`

`v0.32.0`

`v0.6.4`

forking-renovate Bot commented Jul 14, 2026 •

edited

Loading