debian/python-eventlet vulnerabilities

Latest debian/python-eventlet CVEs

Newest publication first

1. DLA-4289-1 python-eventlet - security update

   Published 2025-09-02

   Unknown

2. CVE-2025-58068 Eventlet affected by HTTP request smuggling in unparsed trailers

   Published 2025-08-29

   Medium·CVSS 6.3 EPSS 0.42%

   Eventlet is a concurrent networking library for Python. Prior to version 0.40.3, the Eventlet WSGI parser is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer sections. This vulnerability could enable attackers to, bypass front-end security controls, l...

3. CVE-2023-5625 Python-eventlet: patch regression for cve-2021-21419 in some red hat builds

   Published 2023-11-01

   High·CVSS 7.5 EPSS 0.98%

   A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.

4. CVE-2021-21419 Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet

   Published 2021-05-07

   Medium·CVSS 5.3 EPSS 1.8%

   Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts web...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.