Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

dnspython

2 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

Latest release
2.9.2 (Nov 3, 2026): no advisory affects it
Newest unaffected release
2.9.2 (Nov 3, 2026), the latest release
Advisories
2 · 2 high
Weekly downloads
66.5M
Dependents
21K
Releases
33 since 1.11.0 (Jul 22, 2013)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 2

  • dnspython dns.name.from_wire_parser() excessive CPU use

    Affected: fixed in 2.9.0.

    Fixed in 2.9.0 (released Oct 9, 2026, 13 days before disclosure).

    The latest release, 2.9.2, is not affected.

  • eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly…

    Affected: fixed in 2.6.1.

    Fixed in 2.6.1 (released Feb 18, 2024, 53 days before disclosure).

    The latest release, 2.9.2, is not affected.