aiosend vulnerabilities

CVEs whose affected-version data names the aiosend package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-70646High· 7.5

1mo ago

aiosend is a synchronous and asynchronous Crypto Pay API client

aiosend is a synchronous and asynchronous Crypto Pay API client. Pror to version 3.0.7, `WebhookHandler.feed_update()` deserializes the entire request body before verifying the HMAC signature. This allows an unauthenticated attacker to f…

▾ Twilightaiosend · aiosendEPSS 0.35%via NVD