Vulnerabilities for eventlet

First version without a known vulnerability: 0.40.3

Details

• GHSA-hw6f-rjfj-j7j72025-08-29

  Eventlet affected by HTTP request smuggling in unparsed trailers

  Fixed in: 0.40.3

• GHSA-3rq5-2g8h-59hc2024-04-11

  Potential DoS via the Tudoor mechanism in eventlet and dnspython

  Fixed in: 0.35.2, 2.6.1

• GHSA-9p9m-jm8w-94p22021-05-07

  Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet

  Fixed in: 0.31.0