Not exploitable here. CVE-2026-50269 requires passing user-controlled strings into MultipartWriter.append(headers=...); there is no direct aiohttp usage at all. aiohttp enters this stack…
Not exploitable here. CVE-2026-54278 is a zip-bomb edge case when a server decompresses a request body during cleanup; server-side only, and no aiohttp server runs here. aiohttp enters this…
Not exploitable here. CVE-2026-54277 bypasses max_line_size in the server-side C HTTP parser; no aiohttp server accepts requests in this stack. aiohttp enters this stack only as a transitive…
Not exploitable here. CVE-2026-47265 leaks per-request cookies= across cross-origin redirects; the storage SDKs authenticate with signed headers, not cookies, and no code passes cookies=.…
Not exploitable here. CVE-2026-54273 is a server-side DoS (unbounded pipelined request queue); no aiohttp server runs in this stack. aiohttp enters this stack only as a transitive client…
Not exploitable here. CVE-2026-54274 is server-side memory abuse via incomplete websocket frames; no aiohttp server or websocket endpoints exist here. aiohttp enters this stack only as a…
Not exploitable here. CVE-2026-54276 affects DigestAuthMiddleware following cross-origin redirects; digest auth is unused. aiohttp enters this stack only as a transitive client…
Not exploitable here. CVE-2026-34993 requires calling CookieJar.load() on attacker-controlled files; the stack never persists or loads cookie jars. aiohttp enters this stack only as a…
mo.stop:
mo.stop:
Cascade noise, not a distinct failure: marimo marks every descendant of a failed/stopped cell with its own error output ('An ancestor raised an exception' / 'ancestor-stopped'), and the filer…