PyPI/gevent CVE-2023-41419: unknown, EPSS 1.79%

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.

Action: Upgrade gevent to 23.9.0 or later.

pip install gevent==23.9.0

Affected

Fixed versions

Sources

• osv: PYSEC-2023-177
• https://github.com/gevent/gevent/issues/1989
• https://github.com/gevent/gevent/commit/2f53c851eaf926767fbac62385615efd4886221c
• https://github.com/advisories/GHSA-x7m3-jprg-wc5g

CVE-2023-41419 · published 2023-09-25T12:15:00Z · modified 2026-06-10T17:01:18.969238165Z · JSON