Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-bnye-3p23-zyc9

Summary

Eventlet affected by HTTP request smuggling in unparsed trailers
### Impact
The Eventlet WSGI parser is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer sections.

This vulnerability could enable attackers to:
- Bypass front-end security controls
- Launch targeted attacks against active site users
- Poison web caches

### Patches
Problem has been patched in eventlet 0.40.3.

The patch just drops trailers. If a backend behind eventlet.wsgi proxy requires trailers, then this patch BREAKS your setup.

### Workarounds
Do not use eventlet.wsgi facing untrusted clients.

### References
- Patch https://github.com/eventlet/eventlet/pull/1062
- This issue is similar to https://github.com/advisories/GHSA-9548-qrrj-x5pj

Aliases

alias	CVE-2025-58068

alias	GHSA-hw6f-rjfj-j7j7

Fixed_packages

url	pkg:deb/debian/python-eventlet@0.26.1-7%2Bdeb11u1?distro=trixie
purl	pkg:deb/debian/python-eventlet@0.26.1-7%2Bdeb11u1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.26.1-7%252Bdeb11u1%3Fdistro=trixie

url	pkg:deb/debian/python-eventlet@0.26.1-7%2Bdeb11u2?distro=trixie
purl	pkg:deb/debian/python-eventlet@0.26.1-7%2Bdeb11u2?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.26.1-7%252Bdeb11u2%3Fdistro=trixie

url pkg:deb/debian/python-eventlet@0.33.1-4

purl pkg:deb/debian/python-eventlet@0.33.1-4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.33.1-4

url	pkg:deb/debian/python-eventlet@0.39.1-2%2Bdeb13u1?distro=trixie
purl	pkg:deb/debian/python-eventlet@0.39.1-2%2Bdeb13u1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.39.1-2%252Bdeb13u1%3Fdistro=trixie

url	pkg:deb/debian/python-eventlet@0.39.1-2%2Bdeb13u1
purl	pkg:deb/debian/python-eventlet@0.39.1-2%2Bdeb13u1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.39.1-2%252Bdeb13u1

url	pkg:deb/debian/python-eventlet@0.40.1-3?distro=trixie
purl	pkg:deb/debian/python-eventlet@0.40.1-3?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.40.1-3%3Fdistro=trixie

url	pkg:deb/debian/python-eventlet@0.40.4-1?distro=trixie
purl	pkg:deb/debian/python-eventlet@0.40.4-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.40.4-1%3Fdistro=trixie

url	pkg:pypi/eventlet@0.40.3
purl	pkg:pypi/eventlet@0.40.3
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.40.3

Affected_packages

url pkg:deb/debian/python-eventlet@0.9.16-3

purl pkg:deb/debian/python-eventlet@0.9.16-3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.9.16-3

url pkg:deb/debian/python-eventlet@0.13.0-2

purl pkg:deb/debian/python-eventlet@0.13.0-2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.13.0-2

url pkg:deb/debian/python-eventlet@0.19.0-6~bpo8%2B1

purl pkg:deb/debian/python-eventlet@0.19.0-6~bpo8%2B1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.19.0-6~bpo8%252B1

url pkg:deb/debian/python-eventlet@0.19.0-6

purl pkg:deb/debian/python-eventlet@0.19.0-6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.19.0-6

url pkg:deb/debian/python-eventlet@0.20.0-6

purl pkg:deb/debian/python-eventlet@0.20.0-6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.20.0-6

url pkg:deb/debian/python-eventlet@0.26.1-7%2Bdeb11u1

purl pkg:deb/debian/python-eventlet@0.26.1-7%2Bdeb11u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.26.1-7%252Bdeb11u1

url pkg:deb/debian/python-eventlet@0.33.1-4?distro=trixie

purl pkg:deb/debian/python-eventlet@0.33.1-4?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.33.1-4%3Fdistro=trixie

url pkg:deb/debian/python-eventlet@0.33.1-4

purl pkg:deb/debian/python-eventlet@0.33.1-4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-eventlet@0.33.1-4

url pkg:pypi/eventlet@0.2

purl pkg:pypi/eventlet@0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.2

url pkg:pypi/eventlet@0.5.3

purl pkg:pypi/eventlet@0.5.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.5.3

url pkg:pypi/eventlet@0.6.1

purl pkg:pypi/eventlet@0.6.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.6.1

url pkg:pypi/eventlet@0.7

purl pkg:pypi/eventlet@0.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.7

url pkg:pypi/eventlet@0.8

purl pkg:pypi/eventlet@0.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.8

url pkg:pypi/eventlet@0.8.16

purl pkg:pypi/eventlet@0.8.16

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.8.16

url pkg:pypi/eventlet@0.9.17

purl pkg:pypi/eventlet@0.9.17

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.9.17

url pkg:pypi/eventlet@0.10.0

purl pkg:pypi/eventlet@0.10.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.10.0

url pkg:pypi/eventlet@0.11.0

purl pkg:pypi/eventlet@0.11.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.11.0

url pkg:pypi/eventlet@0.12.1

purl pkg:pypi/eventlet@0.12.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.12.1

url pkg:pypi/eventlet@0.13.0

purl pkg:pypi/eventlet@0.13.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.13.0

url pkg:pypi/eventlet@0.14.0

purl pkg:pypi/eventlet@0.14.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.14.0

url pkg:pypi/eventlet@0.15.2

purl pkg:pypi/eventlet@0.15.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.15.2

url pkg:pypi/eventlet@0.16.1

purl pkg:pypi/eventlet@0.16.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.16.1

url pkg:pypi/eventlet@0.17.4

purl pkg:pypi/eventlet@0.17.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.17.4

url pkg:pypi/eventlet@0.18.2

purl pkg:pypi/eventlet@0.18.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.18.2

url pkg:pypi/eventlet@0.18.3

purl pkg:pypi/eventlet@0.18.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.18.3

url pkg:pypi/eventlet@0.18.4

purl pkg:pypi/eventlet@0.18.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.18.4

url pkg:pypi/eventlet@0.19.0

purl pkg:pypi/eventlet@0.19.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.19.0

url pkg:pypi/eventlet@0.20.0

purl pkg:pypi/eventlet@0.20.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.20.0

url pkg:pypi/eventlet@0.20.1

purl pkg:pypi/eventlet@0.20.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.20.1

url pkg:pypi/eventlet@0.21.0

purl pkg:pypi/eventlet@0.21.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.21.0

url pkg:pypi/eventlet@0.22.0

purl pkg:pypi/eventlet@0.22.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.22.0

url pkg:pypi/eventlet@0.22.1

purl pkg:pypi/eventlet@0.22.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.22.1

url pkg:pypi/eventlet@0.23.0

purl pkg:pypi/eventlet@0.23.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.23.0

url pkg:pypi/eventlet@0.24.0

purl pkg:pypi/eventlet@0.24.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.24.0

url pkg:pypi/eventlet@0.24.1

purl pkg:pypi/eventlet@0.24.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.24.1

url pkg:pypi/eventlet@0.25.0

purl pkg:pypi/eventlet@0.25.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.25.0

url pkg:pypi/eventlet@0.25.1

purl pkg:pypi/eventlet@0.25.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.25.1

url pkg:pypi/eventlet@0.25.2

purl pkg:pypi/eventlet@0.25.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.25.2

url pkg:pypi/eventlet@0.26.0

purl pkg:pypi/eventlet@0.26.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.26.0

url pkg:pypi/eventlet@0.26.1

purl pkg:pypi/eventlet@0.26.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.26.1

url pkg:pypi/eventlet@0.27.0

purl pkg:pypi/eventlet@0.27.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.27.0

url pkg:pypi/eventlet@0.28.0

purl pkg:pypi/eventlet@0.28.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.28.0

url pkg:pypi/eventlet@0.28.1

purl pkg:pypi/eventlet@0.28.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.28.1

url pkg:pypi/eventlet@0.29.0

purl pkg:pypi/eventlet@0.29.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.29.0

url pkg:pypi/eventlet@0.29.1

purl pkg:pypi/eventlet@0.29.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.29.1

url pkg:pypi/eventlet@0.30.0

purl pkg:pypi/eventlet@0.30.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.30.0

url pkg:pypi/eventlet@0.30.1

purl pkg:pypi/eventlet@0.30.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.30.1

url pkg:pypi/eventlet@0.30.2

purl pkg:pypi/eventlet@0.30.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.30.2

url pkg:pypi/eventlet@0.30.3

purl pkg:pypi/eventlet@0.30.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

vulnerability	VCID-cgcf-st57-tkd1

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.30.3

url pkg:pypi/eventlet@0.31.0

purl pkg:pypi/eventlet@0.31.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.31.0

url pkg:pypi/eventlet@0.31.1

purl pkg:pypi/eventlet@0.31.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.31.1

url pkg:pypi/eventlet@0.32.0

purl pkg:pypi/eventlet@0.32.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.32.0

url pkg:pypi/eventlet@0.33.0

purl pkg:pypi/eventlet@0.33.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.33.0

url pkg:pypi/eventlet@0.33.1

purl pkg:pypi/eventlet@0.33.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.33.1

url pkg:pypi/eventlet@0.33.2

purl pkg:pypi/eventlet@0.33.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.33.2

url pkg:pypi/eventlet@0.33.3

purl pkg:pypi/eventlet@0.33.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.33.3

url pkg:pypi/eventlet@0.34.1

purl pkg:pypi/eventlet@0.34.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.34.1

url pkg:pypi/eventlet@0.34.2

purl pkg:pypi/eventlet@0.34.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.34.2

url pkg:pypi/eventlet@0.34.3

purl pkg:pypi/eventlet@0.34.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.34.3

url pkg:pypi/eventlet@0.35.0

purl pkg:pypi/eventlet@0.35.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.35.0

url pkg:pypi/eventlet@0.35.1

purl pkg:pypi/eventlet@0.35.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7493-kzzq-27dw

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.35.1

url pkg:pypi/eventlet@0.35.2

purl pkg:pypi/eventlet@0.35.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.35.2

url pkg:pypi/eventlet@0.36.0

purl pkg:pypi/eventlet@0.36.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.36.0

url pkg:pypi/eventlet@0.36.1

purl pkg:pypi/eventlet@0.36.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.36.1

url pkg:pypi/eventlet@0.37.0

purl pkg:pypi/eventlet@0.37.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.37.0

url pkg:pypi/eventlet@0.38.0

purl pkg:pypi/eventlet@0.38.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.38.0

url pkg:pypi/eventlet@0.38.1

purl pkg:pypi/eventlet@0.38.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.38.1

url pkg:pypi/eventlet@0.38.2

purl pkg:pypi/eventlet@0.38.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.38.2

url pkg:pypi/eventlet@0.39.0

purl pkg:pypi/eventlet@0.39.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.39.0

url pkg:pypi/eventlet@0.39.1

purl pkg:pypi/eventlet@0.39.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.39.1

url pkg:pypi/eventlet@0.40.0

purl pkg:pypi/eventlet@0.40.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.40.0

url pkg:pypi/eventlet@0.40.1

purl pkg:pypi/eventlet@0.40.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.40.1

url pkg:pypi/eventlet@0.40.2

purl pkg:pypi/eventlet@0.40.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/eventlet@0.40.2

url pkg:rpm/redhat/python-eventlet@0.33.1-7?arch=el9ost

purl pkg:rpm/redhat/python-eventlet@0.33.1-7?arch=el9ost

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bnye-3p23-zyc9

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-eventlet@0.33.1-7%3Farch=el9ost

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-58068.json

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-58068.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2025-58068

reference_id

reference_type

scores

value	0.00059
scoring_system	epss
scoring_elements	0.1839
published_at	2026-04-18T12:55:00Z

value	0.00059
scoring_system	epss
scoring_elements	0.18378
published_at	2026-04-16T12:55:00Z

value	0.00059
scoring_system	epss
scoring_elements	0.18434
published_at	2026-04-13T12:55:00Z

value	0.00059
scoring_system	epss
scoring_elements	0.18485
published_at	2026-04-12T12:55:00Z

value	0.00059
scoring_system	epss
scoring_elements	0.18533
published_at	2026-04-11T12:55:00Z

value	0.00059
scoring_system	epss
scoring_elements	0.18532
published_at	2026-04-09T12:55:00Z

value	0.00059
scoring_system	epss
scoring_elements	0.18479
published_at	2026-04-08T12:55:00Z

value	0.00059
scoring_system	epss
scoring_elements	0.18398
published_at	2026-04-07T12:55:00Z

value	0.00059
scoring_system	epss
scoring_elements	0.18683
published_at	2026-04-04T12:55:00Z

value	0.00062
scoring_system	epss
scoring_elements	0.19415
published_at	2026-04-02T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2025-58068

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58068
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58068

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url

https://github.com/eventlet/eventlet

reference_id

reference_type

scores

value	6.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/eventlet/eventlet

reference_url

https://github.com/eventlet/eventlet/commit/0bfebd1117d392559e25b4bfbfcc941754de88fb

reference_id

reference_type

scores

value	6.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-02T13:49:48Z/

url

https://github.com/eventlet/eventlet/commit/0bfebd1117d392559e25b4bfbfcc941754de88fb

reference_url

https://github.com/eventlet/eventlet/pull/1062

reference_id

reference_type

scores

value	6.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-02T13:49:48Z/

url

https://github.com/eventlet/eventlet/pull/1062

reference_url

https://github.com/eventlet/eventlet/security/advisories/GHSA-hw6f-rjfj-j7j7

reference_id

reference_type

scores

value	MODERATE
scoring_system	cvssv3.1_qr
scoring_elements

value	6.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-02T13:49:48Z/

url

https://github.com/eventlet/eventlet/security/advisories/GHSA-hw6f-rjfj-j7j7

reference_url

https://lists.debian.org/debian-lts-announce/2025/09/msg00003.html

reference_id

reference_type

scores

value	6.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://lists.debian.org/debian-lts-announce/2025/09/msg00003.html

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2025-58068

reference_id

reference_type

scores

value	6.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2025-58068

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1112515
reference_id	1112515
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1112515

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=2391958
reference_id	2391958
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=2391958

reference_url

https://github.com/advisories/GHSA-hw6f-rjfj-j7j7

reference_id

GHSA-hw6f-rjfj-j7j7

reference_type

scores

value	MODERATE
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-hw6f-rjfj-j7j7

reference_url	https://access.redhat.com/errata/RHSA-2026:0663
reference_id	RHSA-2026:0663
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:0663

reference_url	https://access.redhat.com/errata/RHSA-2026:1062
reference_id	RHSA-2026:1062
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:1062

reference_url	https://access.redhat.com/errata/RHSA-2026:1549
reference_id	RHSA-2026:1549
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:1549

reference_url	https://access.redhat.com/errata/RHSA-2026:1552
reference_id	RHSA-2026:1552
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:1552

reference_url	https://access.redhat.com/errata/RHSA-2026:1577
reference_id	RHSA-2026:1577
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:1577

reference_url	https://access.redhat.com/errata/RHSA-2026:1959
reference_id	RHSA-2026:1959
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:1959

reference_url	https://access.redhat.com/errata/RHSA-2026:2129
reference_id	RHSA-2026:2129
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:2129

reference_url	https://access.redhat.com/errata/RHSA-2026:2661
reference_id	RHSA-2026:2661
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:2661

reference_url	https://access.redhat.com/errata/RHSA-2026:2990
reference_id	RHSA-2026:2990
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:2990

reference_url	https://access.redhat.com/errata/RHSA-2026:3422
reference_id	RHSA-2026:3422
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:3422

reference_url	https://access.redhat.com/errata/RHSA-2026:3870
reference_id	RHSA-2026:3870
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:3870

reference_url	https://usn.ubuntu.com/7772-1/
reference_id	USN-7772-1
reference_type
scores
url	https://usn.ubuntu.com/7772-1/

Weaknesses

cwe_id	444
name	Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
description	The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

Exploits

Severity_range_score 4.0 - 6.9

Exploitability 0.5

Weighted_severity 6.2

Risk_score 3.1

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bnye-3p23-zyc9

Vulnerability Instance