PyPI/gevent CVE-2023-41419: critical 9.8, EPSS 1.79%

Gevent allows remote attacker to escalate privileges

Action: Upgrade gevent to 23.9.0 or later.

pip install gevent==23.9.0

Affected

Fixed versions

Sources

• osv: GHSA-x7m3-jprg-wc5g
• https://nvd.nist.gov/vuln/detail/CVE-2023-41419
• https://github.com/gevent/gevent/issues/1989
• https://github.com/gevent/gevent/commit/2f53c851eaf926767fbac62385615efd4886221c
• https://github.com/gevent/gevent
• https://github.com/pypa/advisory-database/tree/main/vulns/gevent/PYSEC-2023-177.yaml
• https://lists.debian.org/debian-lts-announce/2025/11/msg00020.html
• http://www.gevent.org/changelog.html

CVE-2023-41419 · published 2023-09-25T12:30:44Z · modified 2026-09-10T03:50:03.449280541Z · JSON