VulnerableCode Package Details - pkg:pypi/eventlet@0.10

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:pypi/eventlet@0.10

Essentials
History (2)

purl	pkg:pypi/eventlet@0.10
Tags	Ghost

Next non-vulnerable version	0.40.3
Latest non-vulnerable version	0.40.3
Risk	3.1

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-cgcf-st57-tkd1 Aliases: CVE-2021-21419 GHSA-9p9m-jm8w-94p2 PYSEC-2021-12	Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.	0.31.0 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-02T16:56:36.889780+00:00	GHSA Importer	Affected by	VCID-cgcf-st57-tkd1	https://github.com/advisories/GHSA-9p9m-jm8w-94p2	38.1.0
2026-04-02T12:38:22.292945+00:00	GitLab Importer	Affected by	VCID-cgcf-st57-tkd1	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/eventlet/CVE-2021-21419.yml	38.0.0