Authentication digest disclosure via cross-origin redirect challenge

Information disclosure in aiohttp DigestAuthMiddleware before 3.14.1 allows remote attackers to obtain an authentication digest. The middleware answers a digest challenge from a redirected cross-origin request without limiting configured credentials to the first request's origin. Following redirects is enabled by default; exploitation requires an attacker-controlled destination reached through an open redirect or similar condition, while password recovery requires weak digest cryptography or password reuse.