tocsin

PyPI/eventlet CVE-2021-21419: unknown, EPSS 1.79%

Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side

Action: Upgrade eventlet to 0.31.0 or later.

pip install eventlet==0.31.0

Affected

introducedfixedlast affected
0.10.00.31.0-

Fixed versions

0.31.0

Sources

CVE-2021-21419 · published · modified · JSON