Skip to content
OpenAdvisories
Medium DLA-4289-1 1 CVE

python-eventlet - security update

Published Sep 2, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 python-eventlet 0.26.1-7+deb11u2

Vulnerabilities 1

  • Medium 6.3
    CVE-2025-58068

    Eventlet affected by HTTP request smuggling in unparsed trailers

    Eventlet is a concurrent networking library for Python. Prior to version 0.40.3, the Eventlet WSGI parser is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer sections. This vulnerability could enable attackers to, bypass front-end…

    eventlet eventlet eventlet python-eventlet Debian Ubuntu PyPI