Eventlet vulnerabilities
We track 2 vulnerabilities in Eventlet products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 29, 2025.
2vulnerabilities
1critical
1high
0exploited
8.1average CVSS score
Latest Eventlet vulnerabilities
- 9.1 Critical severity
eventlet: Inconsistent Interpretation of HTTP Requests
Eventlet is a concurrent networking library for Python. Prior to version 0.40.3, the Eventlet WSGI parser is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer sections. This vulnerability could enable attackers to, bypass front-end
- 7.0 High severity
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to…
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does no