twisted vulnerabilities (Debian)

23 vulnerabilities.

• twisted Debian Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value CVE-2026-115877 Fix available 5.4 MediumOctober 23, 2026
• twisted Debian Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation CVE-2026-83813 Fix available 3.1 LowOctober 23, 2026
• twisted Debian Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer CVE-2026-115778 Fix available 7.5 HighOctober 23, 2026
• twisted Debian Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer CVE-2026-115776 Fix available 7.5 HighOctober 23, 2026
• twisted Debian Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree CVE-2026-115775 Fix available 8.7 HighOctober 23, 2026
• twisted Debian Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH CVE-2026-115774 Fix available 4.9 MediumOctober 23, 2026
• twisted Debian Twisted: IMAP wildcardToRegexp() ReDoS CVE-2026-106454 Fix available 4.3 MediumOctober 6, 2026
• twisted Debian Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains CVE-2026-42304 Fix available 7.5 HighMay 5, 2026
• twisted Debian HTML injection in HTTP redirect body CVE-2024-41810 Fix available 6.1 MediumJuly 29, 2024
• twisted Debian twisted.web has disordered HTTP pipeline response CVE-2024-41671 Fix available 8.3 HighJuly 29, 2024
• twisted Debian twisted.web has disordered HTTP pipeline response CVE-2023-46137 Fix available 5.3 MediumOctober 25, 2023
• twisted Debian Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• twisted Debian Twisted vulnerable to NameVirtualHost Host header injection CVE-2022-39348 Fix available 5.4 MediumOctober 26, 2022
• twisted Debian HTTP Request Smuggling in twisted.web CVE-2022-24801 Fix available 8.1 HighApril 4, 2022
• twisted Debian Buffer Overflow in Twisted CVE-2022-21716 Fix available 7.5 HighMarch 3, 2022
• twisted Debian Cookie and header exposure in twisted CVE-2022-21712 Fix available 7.5 HighFebruary 7, 2022
• twisted Debian twisted - regression update DLA-2145-2 Fix available No scoreMarch 19, 2020
• twisted Debian Improper Input Validation in Twisted CVE-2020-10108 Fix available 9.8 CriticalMarch 12, 2020
• twisted Debian HTTP Request Smuggling in Twisted CVE-2020-10109 Fix available 9.8 CriticalMarch 12, 2020
• twisted Debian Python Twisted trustRoot is not respected in HTTP client CVE-2014-7143 Fix available 7.5 HighNovember 12, 2019
• twisted Debian Improper Certificate Validation in Twisted CVE-2019-12855 Fix available 7.4 HighJune 16, 2019
• twisted Debian Twisted CRLF Injection CVE-2019-12387 Fix available 6.1 MediumJune 10, 2019
• twisted Debian Forced Browsing in Twisted CVE-2016-1000111 Fix available 5.3 MediumJuly 18, 2016