Junglewise Threat Intelligence

CVE-2025-58068: PYSEC-2026-1350 - Eventlet affected by HTTP request smuggling in unparsed trailers

CVE-2025-58068 · Severity: medium · CVSS 4 · Published 2026-07-07

Technologies: eventlet (PyPI). Vendors: PyPI.

Executive brief

Eventlet affected by HTTP request smuggling in unparsed trailers

Affected products

PyPI eventlet

Related threats

PYSEC-2026-2472 - Potential DoS via the Tudoor mechanism in eventlet and dnspython
PYSEC-2021-12 - Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket