Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/python-eventlet@0.30.2-1
purl pkg:alpm/archlinux/python-eventlet@0.30.2-1
Next non-vulnerable version 0.31.0-1
Latest non-vulnerable version 0.31.0-1
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-cgcf-st57-tkd1
Aliases:
CVE-2021-21419
GHSA-9p9m-jm8w-94p2
PYSEC-2021-12
Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.
0.31.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:26:45.494685+00:00 Arch Linux Importer Affected by VCID-cgcf-st57-tkd1 https://security.archlinux.org/AVG-1928 38.0.0