{"id":"CVE-2023-41419","aliases":["ALSA-2024:8834","AZL-30058","DEBIAN-CVE-2023-41419","DLA-4377-1","EUVD-2023-0084","GHSA-x7m3-jprg-wc5g","OESA-2023-1697","OESA-2023-1698","OESA-2023-1699","PYSEC-2023-177","RHSA-2023:7438","RHSA-2024:7421","RHSA-2024:7785","RHSA-2024:8102","RHSA-2024:8105","RHSA-2024:8834","RLSA-2024:8834","ROOT-APP-PYPI-CVE-2023-41419","SUSE-SU-2023:3975-1","SUSE-SU-2023:4009-1","SUSE-SU-2023:4091-1","UBUNTU-CVE-2023-41419","openSUSE-SU-2024:13254-1"],"status":"published","title":"Gevent allows remote attacker to escalate privileges","description":"An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01793,"percentile":0.7859,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-09-25T00:00:00Z","modified":"2026-10-29T11:02:27Z","fixes":[{"ecosystem":"PyPI","package":"gevent","fixed_in":["23.9.0"],"sources":["ghsa","osv"]},{"ecosystem":"AlmaLinux:8","package":"python3-gevent","fixed_in":["1.2.2-5.el8_10"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"python-gevent","fixed_in":["1.3.6-9"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python-gevent","fixed_in":["23.9.1-0.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python-gevent","fixed_in":["23.9.1-0.1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"python-gevent","fixed_in":["20.9.0-2+deb11u1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"python-gevent","fixed_in":["20.6.1-2.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"python-gevent","fixed_in":["21.1.2-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"python-gevent","fixed_in":["21.1.2-2.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"python-gevent","fixed_in":["0:21.1.2-2.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"python-gevent-debugsource","fixed_in":["0:21.1.2-2.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-gevent","fixed_in":["0:21.1.2-2.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-gevent-debuginfo","fixed_in":["0:21.1.2-2.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python-gevent","fixed_in":["0:1.2.2-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python-gevent-debugsource","fixed_in":["0:1.2.2-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python3-gevent","fixed_in":["0:1.2.2-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python3-gevent-debuginfo","fixed_in":["0:1.2.2-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python-gevent","fixed_in":["0:1.2.2-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python-gevent-debugsource","fixed_in":["0:1.2.2-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python3-gevent","fixed_in":["0:1.2.2-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python3-gevent-debuginfo","fixed_in":["0:1.2.2-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python-gevent","fixed_in":["0:1.2.2-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python-gevent-debugsource","fixed_in":["0:1.2.2-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python3-gevent","fixed_in":["0:1.2.2-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python3-gevent-debuginfo","fixed_in":["0:1.2.2-5.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"python-gevent","fixed_in":["0:1.2.2-5.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"python-gevent-debugsource","fixed_in":["0:1.2.2-5.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"python3-gevent","fixed_in":["0:1.2.2-5.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"python3-gevent-debuginfo","fixed_in":["0:1.2.2-5.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python-gevent","fixed_in":["0:1.2.2-5.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python-gevent-debugsource","fixed_in":["0:1.2.2-5.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-gevent","fixed_in":["0:1.2.2-5.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-gevent-debuginfo","fixed_in":["0:1.2.2-5.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python-gevent","fixed_in":["0:1.2.2-5.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python-gevent-debugsource","fixed_in":["0:1.2.2-5.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python3-gevent","fixed_in":["0:1.2.2-5.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python3-gevent-debuginfo","fixed_in":["0:1.2.2-5.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"python-gevent","fixed_in":["0:1.2.2-5.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"python-gevent-debugsource","fixed_in":["0:1.2.2-5.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"python3-gevent","fixed_in":["0:1.2.2-5.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"python3-gevent-debuginfo","fixed_in":["0:1.2.2-5.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"python-gevent","fixed_in":["0:1.2.2-5.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"python-gevent-debugsource","fixed_in":["0:1.2.2-5.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"python3-gevent","fixed_in":["0:1.2.2-5.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"python3-gevent-debuginfo","fixed_in":["0:1.2.2-5.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-gevent","fixed_in":["0:1.2.2-5.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-gevent-debugsource","fixed_in":["0:1.2.2-5.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-gevent","fixed_in":["0:1.2.2-5.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-gevent-debuginfo","fixed_in":["0:1.2.2-5.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"python-gevent","fixed_in":["0:1.2.2-5.el8"],"sources":["osv"]},{"ecosystem":"Root:PyPI","package":"gevent","fixed_in":["21.12.0+aikido.2","21.12.0+aikido.3"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"python-gevent","fixed_in":["1.3.5-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-gevent","fixed_in":["1.3.5-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-gevent","fixed_in":["1.1.2-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"python-gevent","fixed_in":["1.1.2-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-gevent","fixed_in":["1.1.2-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-gevent","fixed_in":["1.2.2-150000.5.3.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.9.0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-5.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["22.10.2-3","23.9.1-0.2","23.9.1-1","24.11.1-1","24.2.1-0.1","24.2.1-1","25.9.1-1","25.9.1-2"]},{"source":"osv","ecosystem":"Debian:13","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.9.1-0.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.9.1-0.1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.9.0-2+deb11u1"}]}],"versions":["20.9.0-2"]},{"source":"osv","ecosystem":"PyPI","package":"gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.9.0"}]}],"versions":["0.10.0","0.11.0","0.11.1","0.11.2","0.12.0","0.12.1","0.12.2","0.13.0","0.13.1","0.13.2","0.13.3","0.13.4","0.13.5","0.13.6","0.13.7","0.13.8","0.9.2","0.9.3","1.0","1.0.1","1.0.2","1.1.0","1.1.1","1.1.2","1.1a1","1.1a2","1.1b1","1.1b2","1.1b3","1.1b4","1.1b5","1.1b6","1.1rc1","1.1rc2","1.1rc3","1.1rc4","1.1rc5","1.2.0","1.2.1","1.2.2","1.2a1","1.2a2","1.3.0","1.3.1","1.3.2","1.3.2.post0","1.3.3","1.3.4","1.3.5","1.3.6","1.3.7","1.3a1","1.3a2","1.3b1","1.3b2","1.4.0","1.5.0","1.5a1","1.5a2","1.5a3","1.5a4","20.12.0","20.12.1","20.4.0","20.5.0","20.5.1","20.5.2","20.6.0","20.6.1","20.6.2","20.9.0","21.1.0","21.1.1","21.1.2","21.12.0","21.8.0","22.10.1","22.10.2","22.8.0","23.7.0"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.6.1-2.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.2-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.2-2.oe2203sp2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"gevent","ranges":[{"type":"GIT","events":[{"introduced":"0"},{"fixed":"2f53c851eaf926767fbac62385615efd4886221c"}]},{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.9.0"}]}],"versions":["0.10.0","0.11.0","0.11.1","0.11.2","0.12.0","0.12.1","0.12.2","0.13.0","0.13.1","0.13.2","0.13.3","0.13.4","0.13.5","0.13.6","0.13.7","0.13.8","0.9.2","0.9.3","1.0","1.0.1","1.0.2","1.1.0","1.1.1","1.1.2","1.1a1","1.1a2","1.1b1","1.1b2","1.1b3","1.1b4","1.1b5","1.1b6","1.1rc1","1.1rc2","1.1rc3","1.1rc4","1.1rc5","1.2.0","1.2.1","1.2.2","1.2a1","1.2a2","1.3.0","1.3.1","1.3.2","1.3.2.post0","1.3.3","1.3.4","1.3.5","1.3.6","1.3.7","1.3a1","1.3a2","1.3b1","1.3b2","1.4.0","1.5.0","1.5a1","1.5a2","1.5a3","1.5a4","20.12.0","20.12.1","20.4.0","20.5.0","20.5.1","20.5.2","20.6.0","20.6.1","20.6.2","20.9.0","21.1.0","21.1.1","21.1.2","21.12.0","21.8.0","22.10.1","22.10.2","22.8.0","23.7.0","22.08.0","20.04.0","v1.2a2","v1.2a1","v1.1.0","v1.1rc3","v1.1rc2","v1.1rc1","v1.1b6","v1.1b5","v1.1b4","v1.1b3","v1.1b2","v1.1b1","v1.1a2","v1.1a1","1.0rc3","1.0rc1","1.0rc2","1.0b4","1.0b3","1.0b2","1.0b1","1.0a3","1.0a2","1.0a1","0.13.1b2","0.13.1b1","0.13.0b2","0.13.0-beta1","0.12.0-preview-2","0.12.0-preview","0.9.1","0.9.0"]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.2-2.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python-gevent-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.2-2.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.2-2.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-gevent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.2-2.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python-gevent-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python3-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python3-gevent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python-gevent-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python3-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python3-gevent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python-gevent-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python3-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python3-gevent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"python-gevent-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"python3-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"python3-gevent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python-gevent-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-gevent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python-gevent-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python3-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python3-gevent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"python-gevent-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"python3-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"python3-gevent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"python-gevent-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"python3-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"python3-gevent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-gevent-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-gevent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-5.el8"}]}]},{"source":"osv","ecosystem":"Root:PyPI","package":"gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.12.0+aikido.2"},{"fixed":"21.12.0+aikido.3"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-150000.5.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13.7-4","1.0-1ubuntu1","1.0-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1~b1-0ubuntu1","1.1~b1-0ubuntu2","1.1.0-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.2-build2","1.2.2-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.7-1build1","1.3.7-1ubuntu1","1.3.7-1ubuntu2","1.4.0-1","1.4.0-1.1","1.4.0-1.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python-gevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20.9.0-2","20.9.0-4","21.8.0-1","21.8.0-1build1"]}],"products":[{"vendor":"gevent","product":"gevent"}],"references":[{"url":"https://github.com/gevent/gevent/issues/1989","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://github.com/gevent/gevent/commit/2f53c851eaf926767fbac62385615efd4886221c","tags":["x_transferred","Patch","fix","web","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/11/msg00020.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41419","tags":["web","advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/gevent/PYSEC-2023-177.yaml","tags":["web"]},{"url":"http://www.gevent.org/changelog.html","tags":["web"]},{"url":"https://github.com/advisories/GHSA-x7m3-jprg-wc5g","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8834","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41419","tags":["report"]},{"url":"https://bugzilla.redhat.com/2240651","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-8834.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41419.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-41419","tags":["advisory"]},{"url":"https://github.com/gevent/gevent","tags":["package"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1697","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1698","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1699","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7438","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240651","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7438.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41419","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:7421","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7421.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:7785","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7785.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8102","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8102.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8105","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8105.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8834.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:8834","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233975-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1215469","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-41419","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234009-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234091-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-41419","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-41419","description":"An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.","status":"published","published":"2023-09-25T00:00:00Z","modified":"2025-11-25T00:11:09.231Z","updated_at":"2026-11-02T14:35:19.217111Z"}],"euvd":[{"id":"EUVD-2023-0084","description":"An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.","status":"published","published":"2023-09-25T00:00:00Z","modified":"2025-11-25T00:11:09Z","updated_at":"2026-11-02T19:49:12.807834Z"}],"ghsa":[{"id":"GHSA-x7m3-jprg-wc5g","title":"Gevent allows remote attacker to escalate privileges","description":"An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.","status":"published","published":"2023-09-25T12:30:44Z","modified":"2025-11-27T07:59:24Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:39:10.178331Z"}],"nvd":[{"id":"CVE-2023-41419","description":"An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.","status":"published","published":"2023-09-25T12:15:11.21Z","modified":"2026-06-17T06:22:04.72Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"updated_at":"2026-11-02T14:08:31.699785Z"}],"osv":[{"id":"AZL-30058","title":"CVE-2023-41419 affecting package python-gevent for versions less than 1.3.6-9","description":"An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.","status":"published","published":"2023-09-25T12:15:11Z","modified":"2026-04-21T04:26:03.113528Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"DEBIAN-CVE-2023-41419","description":"An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.","status":"published","published":"2023-09-25T12:15:11.21Z","modified":"2026-10-26T18:02:49.471956352Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"GHSA-x7m3-jprg-wc5g","title":"Gevent allows remote attacker to escalate privileges","description":"An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.","status":"published","published":"2023-09-25T12:30:44Z","modified":"2026-09-10T03:50:03.449280541Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:46:59.484835Z"},{"id":"OESA-2023-1697","title":"python-gevent security update","description":"gevent is a coroutine -based Python networking library that uses greenlet to provide a high-level synchronous API on top of the libev or libuv event loop.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue in Gevent Gevent before version 23.9.1 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.(CVE-2023-41419)","status":"published","published":"2023-09-28T11:06:08Z","modified":"2026-08-18T01:17:54.169365436Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1698","title":"python-gevent security update","description":"gevent is a coroutine -based Python networking library that uses greenlet to provide a high-level synchronous API on top of the libev or libuv event loop.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue in Gevent Gevent before version 23.9.1 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.(CVE-2023-41419)","status":"published","published":"2023-09-28T11:06:09Z","modified":"2026-08-18T01:17:53.888814962Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1699","title":"python-gevent security update","description":"gevent is a coroutine -based Python networking library that uses greenlet to provide a high-level synchronous API on top of the libev or libuv event loop.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue in Gevent Gevent before version 23.9.1 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.(CVE-2023-41419)","status":"published","published":"2023-09-28T11:06:09Z","modified":"2026-08-18T01:17:54.215821163Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:7438","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 (python-gevent) security update","status":"published","published":"2024-10-01T05:05:23Z","modified":"2026-06-29T10:52:27Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:7421","title":"Red Hat Security Advisory: python-gevent security update","status":"published","published":"2024-10-01T05:07:46Z","modified":"2026-06-29T11:01:55Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:7785","title":"Red Hat Security Advisory: python-gevent security update","status":"published","published":"2024-10-08T06:45:45Z","modified":"2026-06-29T11:02:07Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8102","title":"Red Hat Security Advisory: python-gevent security update","status":"published","published":"2024-10-15T06:54:08Z","modified":"2026-06-29T11:02:28Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8105","title":"Red Hat Security Advisory: python-gevent security update","status":"published","published":"2024-10-15T06:53:59Z","modified":"2026-06-29T11:02:29Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8834","title":"Red Hat Security Advisory: python-gevent security update","status":"published","published":"2024-11-14T00:39:51Z","modified":"2026-06-29T11:03:04Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RLSA-2024:8834","title":"Important: python-gevent security update","description":"gevent is a coroutine-based Python networking library that uses greenlet to provide a high-level synchronous API on top of libevent event loop.  Features include:    * convenient API around greenlets   * familiar synchronization primitives (gevent.event, gevent.queue)   * socket module that cooperates   * WSGI server on top of libevent-http   * DNS requests done through libevent-dns   * monkey patching utility to get pure Python modules to cooperate\n\nSecurity Fix(es):\n\n* python-gevent: privilege escalation via a crafted script to the WSGIServer component (CVE-2023-41419)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-29T18:01:02.798398Z","modified":"2026-05-29T18:24:44.373536638Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"ROOT-APP-PYPI-CVE-2023-41419","title":"CVE-2023-41419 in gevent - Patched by Root","description":"Root has patched CVE-2023-41419 in the gevent package for Root:PyPI. Multiple fixed versions available.","status":"published","published":"2026-10-09T12:23:36Z","modified":"2026-10-09T13:15:03.009075121Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:27.940619Z"},{"id":"UBUNTU-CVE-2023-41419","description":"An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.","status":"published","published":"2023-09-25T12:15:00Z","modified":"2025-11-17T05:07:28Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2024:8834","title":"Important: python-gevent security update","description":"gevent is a coroutine-based Python networking library that uses greenlet to provide a high-level synchronous API on top of libevent event loop. Features include: * convenient API around greenlets * familiar synchronization primitives (gevent.event, gevent.queue) * socket module that cooperates * WSGI server on top of libevent-http * DNS requests done through libevent-dns * monkey patching utility to get pure Python modules to cooperate  \n\nSecurity Fix(es):  \n\n  * python-gevent: privilege escalation via a crafted script to the WSGIServer component (CVE-2023-41419)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2024-11-05T00:00:00Z","modified":"2026-10-29T11:02:27.988872735Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"CVE-2023-41419","description":"An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.","status":"published","published":"2023-09-25T00:00:00Z","modified":"2026-10-28T02:30:41.990441627Z","updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"DLA-4377-1","title":"python-gevent - security update","status":"published","published":"2025-11-24T00:00:00Z","modified":"2025-11-24T22:17:54.314488Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"openSUSE-SU-2024:13254-1","title":"python-gevent-doc-23.9.0-1.1 on GA media","description":"These are all security issues fixed in the python-gevent-doc-23.9.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:31:12.339417Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"PYSEC-2023-177","description":"An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.","status":"published","published":"2023-09-25T12:15:00Z","modified":"2026-06-10T17:01:18.969238165Z","updated_at":"2026-11-02T15:52:53.837392Z"},{"id":"SUSE-SU-2023:3975-1","title":"Security update for python-gevent","description":"This update for python-gevent fixes the following issues:\n\n- CVE-2023-41419: Fixed a http request smuggling (bsc#1215469).\n","status":"published","published":"2023-10-05T08:48:29Z","modified":"2026-02-04T03:11:00.613723Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:4009-1","title":"Security update for python-gevent","description":"This update for python-gevent fixes the following issues:\n\n- CVE-2023-41419: Fixed a http request smuggling (bsc#1215469).\n","status":"published","published":"2023-10-09T07:58:23Z","modified":"2026-02-04T03:14:42.237163Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:4091-1","title":"Security update for python-gevent","description":"This update for python-gevent fixes the following issues:\n\n- CVE-2023-41419: Fixed a http request smuggling (bsc#1215469).\n","status":"published","published":"2023-10-17T06:39:00Z","modified":"2026-02-04T04:03:13.355449Z","updated_at":"2026-11-02T15:53:53.440387Z"}]}}