You might be able to fork and use just this patch: https://github.com/aio-libs/aiohttp/pull/7835/files

I found it on this page: https://github.com/advisories/GHSA-q3qx-c6g2-7pw2