eventlet records
3 published records for vendor eventlet.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-292 DEPRECATED: Trusting Self-reported DNS Name1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
29Monitor | CVE-2023-29483No exploit | eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending eventlet · eventlet · CWE-292 | High7.0 | — | 1.8% | Apr 11, 2024 |
25Monitor | CVE-2025-58068No exploit | Eventlet affected by HTTP request smuggling in unparsed trailerseventlet · eventlet · CWE-444 | Medium6.3 | — | 0.3% | Aug 29, 2025 |
22Monitor | CVE-2021-21419No exploit | Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventleteventlet · eventlet · CWE-400 | Medium5.3 | — | 1.7% | May 7, 2021 |
- CVE-2023-2948329Monitor
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending
HighCVSS 7.0No exploitEPSS 1%eventlet · eventletApr 11, 2024
- CVE-2025-5806825Monitor
Eventlet affected by HTTP request smuggling in unparsed trailers
MediumCVSS 6.3No exploitEPSS 0%eventlet · eventletAug 29, 2025
- CVE-2021-2141922Monitor
Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet
MediumCVSS 5.3No exploitEPSS 1%eventlet · eventletMay 7, 2021