dnspython
PyPI2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting dnspythonpage 1 of 1
- CVE-2023-29483HIGHCVSS 7.0EG 7.0fixed in 2.6.12024-04-11
vulnerable: 1.0.0 ... 2.6.0rc1 (45 versions)
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other wor…
- CVE-2026-114605HIGHCVSS 7.5EG 7.5fixed in 2.9.02026-10-22
vulnerable: 1.0.0 ... 2.8.0rc1 (50 versions)
dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal duri…
Check whether dnspython is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for dnspython CVEs against the assets you own.
Book a Demo →