twisted vulnerabilities (PyPI)

24 vulnerabilities.

• twisted PyPI Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset GHSA-vpp8-g58w-m8mp Fix available 7.5 HighOctober 29, 2026
• twisted PyPI Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value CVE-2026-115877 Fix available 5.4 MediumOctober 23, 2026
• twisted PyPI Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation CVE-2026-83813 Fix available 3.1 LowOctober 23, 2026
• twisted PyPI Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer CVE-2026-115778 Fix available 7.5 HighOctober 23, 2026
• twisted PyPI Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer CVE-2026-115776 Fix available 7.5 HighOctober 23, 2026
• twisted PyPI Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree CVE-2026-115775 Fix available 8.7 HighOctober 23, 2026
• twisted PyPI Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH CVE-2026-115774 Fix available 4.9 MediumOctober 23, 2026
• twisted PyPI Twisted: IMAP wildcardToRegexp() ReDoS CVE-2026-106454 Fix available 4.3 MediumOctober 6, 2026
• twisted PyPI Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains CVE-2026-42304 Fix available 7.5 HighMay 5, 2026
• twisted PyPI HTML injection in HTTP redirect body CVE-2024-41810 Fix available 6.1 MediumJuly 29, 2024
• twisted PyPI twisted.web has disordered HTTP pipeline response CVE-2024-41671 Fix available 8.3 HighJuly 29, 2024
• twisted PyPI twisted.web has disordered HTTP pipeline response CVE-2023-46137 Fix available 5.3 MediumOctober 25, 2023
• twisted PyPI Twisted vulnerable to NameVirtualHost Host header injection CVE-2022-39348 Fix available 5.4 MediumOctober 26, 2022
• twisted PyPI Twisted vulnerable to HTTP Request Smuggling Attacks GHSA-8r99-h8j2-rw64 Fix available No scoreOctober 7, 2022
• twisted PyPI HTTP Request Smuggling in twisted.web CVE-2022-24801 Fix available 8.1 HighApril 4, 2022
• twisted PyPI HTTP/2 DoS Attacks: Ping, Reset, and Settings Floods GHSA-32gv-6cf3-wcmq Fix available No scoreMarch 14, 2022
• twisted PyPI Buffer Overflow in Twisted CVE-2022-21716 Fix available 7.5 HighMarch 3, 2022
• twisted PyPI Cookie and header exposure in twisted CVE-2022-21712 Fix available 7.5 HighFebruary 7, 2022
• twisted PyPI Improper Input Validation in Twisted CVE-2020-10108 Fix available 9.8 CriticalMarch 12, 2020
• twisted PyPI HTTP Request Smuggling in Twisted CVE-2020-10109 Fix available 9.8 CriticalMarch 12, 2020
• twisted PyPI Python Twisted trustRoot is not respected in HTTP client CVE-2014-7143 Fix available 7.5 HighNovember 12, 2019
• twisted PyPI Improper Certificate Validation in Twisted CVE-2019-12855 Fix available 7.4 HighJune 16, 2019
• twisted PyPI Twisted CRLF Injection CVE-2019-12387 Fix available 6.1 MediumJune 10, 2019
• twisted PyPI Forced Browsing in Twisted CVE-2016-1000111 Fix available 5.3 MediumJuly 18, 2016