diff --git a/aiohttp-3.8.5.tar.gz b/aiohttp-3.9.1.tar.gz
similarity index 49%
rename from aiohttp-3.8.5.tar.gz
rename to aiohttp-3.9.1.tar.gz
index b902886011a320e435ca283b6d6c3abae722bb46..c3a579c5a8bb9cbac61706bae3fd6039c2625668 100644
Binary files a/aiohttp-3.8.5.tar.gz and b/aiohttp-3.9.1.tar.gz differ
diff --git a/python-aiohttp.spec b/python-aiohttp.spec
index ef0bf649e8dd43bfae0540fb3062fe35ea1d7164..adbdee11b70a84ea9d51b7a74718cfa4545c115a 100644
--- a/python-aiohttp.spec
+++ b/python-aiohttp.spec
@@ -1,6 +1,6 @@
 %global _empty_manifest_terminate_build 0
 Name:           python-aiohttp
-Version:        3.8.5
+Version:        3.9.1
 Release:        1
 Summary:        Async http client/server framework (asyncio)
 License:        Apache 2
@@ -81,6 +81,9 @@ mv %{buildroot}/doclist.lst .
 %{_docdir}/*
 
 %changelog
+* Fri Dec 01 2023 wangkai <13474090681@163.com> - 3.9.1-1
+- Upgrade to 3.9.1 for fix CVE-2023-47627,CVE-2023-49081,CVE-2023-49082
+
 * Mon Aug 14 2023 yaoxin <yao_xin001@hoperun.com> - 3.8.5-1
 - Upgrade to 3.8.5 for fix CVE-2023-37276
 
diff --git a/python-aiohttp.yaml b/python-aiohttp.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..bf8d20fc4104584d07bb35ee1dea065e931fa495
--- /dev/null
+++ b/python-aiohttp.yaml
@@ -0,0 +1,4 @@
+version_control: github
+src_repo: aio-libs/aiohttp
+tag_prefix: ^v
+separator: .