Skip to main content
FOSSA Logo
Skip to package details

aiohttp

PyPI16.5k GitHub stars

v3.14.3 · Jul 2026 · Apache-2.0 AND MIT (top-level declared license)

pip install aiohttp
  • No known CVEs
  • 655.4M downloads/mo
  • 313 versions

Description

Asynchronous HTTP client/server framework for asyncio and Python

Licenses

Declared license

Apache-2.0 AND MIT (top-level declared license of aiohttp)

Transitive dependency licenses

aiohttp pulls in 8 transitive dependencies across 4 distinct licenses, all permissive.

LicenseCategoryDependencies
Apache-2.0Permissive5 of 8
BSD-3-ClausePermissive1 of 8
MITPermissive1 of 8
PSF-2.0Permissive1 of 8

This view is derived from declared package metadata, and a full FOSSA scan detects licenses that declared metadata misses. Scan free.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.

Need aiohttp approved? Get the full license and vulnerability report for your codebase. Scan free.

Scan free

Vulnerabilities

No known CVEs across published versions

Version history

Published versions
VersionPublishedLicense
3.14.3Jul 2026Apache-2.0 AND MIT
3.14.2Jul 2026
3.14.1Jun 2026
3.14.0Jun 2026
3.13.5Mar 2026
3.13.4Mar 2026
3.13.3Jan 2026
3.13.2Oct 2025
3.13.1Oct 2025
3.13.0Oct 2025
3.12.15Jul 2025
3.12.14Jul 2025
3.12.13Jun 2025
3.12.12Jun 2025
3.12.11Jun 2025
3.12.10Jun 2025
3.12.9Jun 2025
3.12.8Jun 2025
3.12.7Jun 2025
3.12.6May 2025
3.12.4May 2025
3.12.3May 2025
3.12.2May 2025
3.12.1YankedMay 2025
3.12.0May 2025
25 older releases
Older published versions
VersionPublishedLicense
3.11.18Apr 2025
3.11.17YankedApr 2025
3.11.16Apr 2025
3.11.15Apr 2025
3.11.14YankedMar 2025
3.11.13YankedFeb 2025
3.11.12Feb 2025
3.11.11Dec 2024
3.11.10Dec 2024
3.11.9Dec 2024
3.11.8Nov 2024
3.11.7Nov 2024
3.11.6Nov 2024
3.11.5Nov 2024
3.11.4Nov 2024
3.11.3Nov 2024
3.11.2Nov 2024
3.11.1Nov 2024
3.11.0Nov 2024
3.10.11Nov 2024
3.10.10Oct 2024
3.10.9Oct 2024
3.10.8Sep 2024
3.10.7Sep 2024
3.10.6Sep 2024

Latest pre-release: 3.12.7rc0 (Jun 2025). Pre-releases (canary, beta, release candidate and similar) are not listed.

pip install aiohttp resolves to the 3.x line today. Older major lines may still receive fixes.

Dependencies

Direct dependencies

7 direct dependencies, 8 in total including transitive. Licenses across the full tree are summarized under Licenses.

Direct dependencies
PackageVersion rangeLicense
aiohappyeyeballs>=2.5.0PSF-2.0
aiosignal>=1.4.0Apache-2.0
attrs>=17.3.0MIT
frozenlist>=1.1.1Apache-2.0
multidict<7.0,>=4.5Apache-2.0
propcache>=0.2.0Apache-2.0
yarl<2.0,>=1.17.0Apache-2.0

Dependents

Based on what each package declares in its published metadata. The dependencies your build actually installs can differ, and a FOSSA scan of your project resolves the full tree.

Popularity

Downloads last month
655.4M
Known dependents in this corpus
44,950
GitHub stars
16.5k
OpenSSF score
7.5 / 10

FAQ

What is the latest version of aiohttp?
The latest version of aiohttp is 3.14.3, published July 2026.
What license is aiohttp under?
aiohttp declares Apache-2.0 AND MIT as its top-level declared license. Its dependency tree spans 4 distinct licenses.
Does aiohttp have known vulnerabilities?
No known CVEs are recorded against published versions of aiohttp.
How do I install aiohttp?
Install aiohttp with pip install aiohttp.
How do I generate an SBOM that includes aiohttp?
FOSSA's SBOM generator produces SPDX or CycloneDX output for a codebase that includes aiohttp. Generate an SPDX or CycloneDX SBOM free.

Dependency graph and package metadata from deps.dev (Google Open Source Insights), used under CC BY 4.0.

Download counts from PyPI Stats, sourced from the Python Software Foundation download statistics. Counts cover the last 180 days and exclude known mirrors.

Repository stars from the GitHub API.

OpenSSF Scorecard results from deps.dev.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.