https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T13:24:23.013673+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-21419 CVE-2021-21419 — Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eve… 2026-09-30T13:24:23.686306+00:00

Affected: eventlet

Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.

 https://vulnerability.circl.lu/vuln/ghsa-9p9m-jm8w-94p2 GHSA-9p9m-jm8w-94p2 — Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eve… 2026-09-30T13:24:23.686494+00:00

Affected: PyPI: eventlet

### Impact A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame.

### Patches Version 0.31.0 restricts websocket frame to reasonable limits.

### Workarounds Restricting memory usage via OS limits would help against overall machine exhaustion. No workaround to protect Eventlet process.

### For more information If you have any questions or comments about this advisory: * Open an issue in [eventlet](https://github.com/eventlet/eventlet/issues) * Contact current maintainers. At 2021-03: temotor@gmail.com or https://t.me/temotor

 https://vulnerability.circl.lu/vuln/pysec-2021-12 PYSEC-2021-12 2026-09-30T13:24:23.686541+00:00

Affected: PyPI: eventlet

Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process.