{"action":"Upgrade eventlet to 0.31.0 or later.","affected":[{"fixed":"0.31.0","introduced":"0.10.0"}],"component":"eventlet","cve_ids":["CVE-2021-21419"],"ecosystem":"PyPI","epss":0.01792,"exploited":false,"fixed_versions":["0.31.0"],"ghsa_id":"GHSA-9p9m-jm8w-94p2","id":"tcs_01M5KGB4N2K6Y6YK3KE3WX3YHS","modified_at":"2023-11-08T04:04:45.339697Z","published_at":"2021-05-07T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-12","https://github.com/eventlet/eventlet/security/advisories/GHSA-9p9m-jm8w-94p2"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-12","url":"https://osv.dev/vulnerability/PYSEC-2021-12"}],"summary":"Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side"}