CVE-2014-7143

Python Twisted trustRoot is not respected in HTTP client

7.5 HighFix available

Python Twisted 14.0 trustRoot is not respected in HTTP client

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: High
Availability: None

Exploit likelihood

2.61%Up 1.6 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Python Twisted 14.0 trustRoot is not respected in HTTP client

Record: CVE-2014-7143
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness: CWE-295
Updated: 2026-11-02

CVE List No score

Python Twisted 14.0 trustRoot is not respected in HTTP client

Record: CVE-2014-7143
Updated: 2026-11-02

EUVDEUVD-2019-0148 No score

Python Twisted 14.0 trustRoot is not respected in HTTP client

Record: EUVD-2019-0148
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3c45-wgjp-7v9r 8.7

Python Twisted trustRoot is not respected in HTTP client

Python Twisted 14.0.0 trustRoot is not respected in HTTP client

Record: GHSA-3c45-wgjp-7v9r
CVSS 4.0: 8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness: CWE-295
Updated: 2026-11-02

OSV 7.5

Python Twisted 14.0 trustRoot is not respected in HTTP client

Record: CVE-2014-7143
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2014-7143 7.5

Python Twisted 14.0 trustRoot is not respected in HTTP client

Record: DEBIAN-CVE-2014-7143
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVGHSA-3c45-wgjp-7v9r 8.7

Python Twisted trustRoot is not respected in HTTP client

Python Twisted 14.0.0 trustRoot is not respected in HTTP client

Record: GHSA-3c45-wgjp-7v9r
CVSS 4.0: 8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness: CWE-295
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-7143 7.5

Python Twisted 14.0 trustRoot is not respected in HTTP client

Record: UBUNTU-CVE-2014-7143
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVPYSEC-2019-212 No score

Python Twisted 14.0 trustRoot is not respected in HTTP client

Record: PYSEC-2019-212
Updated: 2026-11-02

Affected products

twisted

Affected packages

Affected packages
Package	Affected	Fixed
`twisted` PyPI	14.0.0 to 14.0.0	14.0.1
`twisted` Debian:12	before 14.0.2-1	14.0.2-1
`twisted` Debian:13	before 14.0.2-1	14.0.2-1
`twisted` Debian:14	before 14.0.2-1	14.0.2-1
`twisted` PyPI	14.0.0 up to 14.0.1	14.0.1
`twisted` PyPI	before 14.0.1, plus listed versions 1.0.11.0.31.0.41.0.51.0.6 Show 25 moreShow less 1.0.71.1.01.1.11.2.010.0.010.1.010.2.011.0.011.1.012.0.012.1.012.2.012.3.013.0.013.1.013.2.014.0.02.1.02.4.02.5.08.0.08.0.18.1.08.2.09.0.0	14.0.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	affected
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-7143 is a high vulnerability (CVSS 7.5) in Twisted, published November 12, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.61%, the 85th percentile. Fixed in twisted 14.0.1.

References

Show 6 moreShow less