Twisted vulnerabilities

Products

• Twisted 21

Newest

• twisted Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value CVE-2026-115877 Fix available 5.4 MediumOctober 23, 2026
• twisted Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation CVE-2026-83813 Fix available 3.1 LowOctober 23, 2026
• twisted Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer CVE-2026-115778 Fix available 7.5 HighOctober 23, 2026
• twisted Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer CVE-2026-115776 Fix available 7.5 HighOctober 23, 2026
• twisted Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree CVE-2026-115775 Fix available 8.7 HighOctober 23, 2026
• twisted Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH CVE-2026-115774 Fix available 4.9 MediumOctober 23, 2026
• twisted Twisted: IMAP wildcardToRegexp() ReDoS CVE-2026-106454 Fix available 4.3 MediumOctober 6, 2026
• twisted Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains CVE-2026-42304 Fix available 7.5 HighMay 5, 2026
• twisted HTML injection in HTTP redirect body CVE-2024-41810 Fix available 6.1 MediumJuly 29, 2024
• twisted twisted.web has disordered HTTP pipeline response CVE-2024-41671 Fix available 8.3 HighJuly 29, 2024
• twisted twisted.web has disordered HTTP pipeline response CVE-2023-46137 Fix available 5.3 MediumOctober 25, 2023
• twisted, debian linux +1 more Twisted vulnerable to NameVirtualHost Host header injection CVE-2022-39348 Fix available 5.4 MediumOctober 26, 2022
• twisted, debian linux, fedoraproject fedora +1 more +3 more HTTP Request Smuggling in twisted.web CVE-2022-24801 Fix available 8.1 HighApril 4, 2022
• twisted, debian linux, fedoraproject fedora +2 more +4 more Buffer Overflow in Twisted CVE-2022-21716 Fix available 7.5 HighMarch 3, 2022
• twisted, debian linux, fedoraproject fedora +2 more Cookie and header exposure in twisted CVE-2022-21712 Fix available 7.5 HighFebruary 7, 2022
• twisted treq, debian linux +1 more Unsafe handling of user-specified cookies in treq CVE-2022-23607 Fix available 6.5 MediumFebruary 1, 2022
• twisted, canonical ubuntu linux, debian linux +3 more +5 more Improper Input Validation in Twisted CVE-2020-10108 Fix available 9.8 CriticalMarch 12, 2020
• twisted, canonical ubuntu linux, debian linux +1 more +3 more HTTP Request Smuggling in Twisted CVE-2020-10109 Fix available 9.8 CriticalMarch 12, 2020
• twisted Python Twisted trustRoot is not respected in HTTP client CVE-2014-7143 Fix available 7.5 HighNovember 12, 2019
• twisted Improper Certificate Validation in Twisted CVE-2019-12855 Fix available 7.4 HighJune 16, 2019
• twisted, canonical ubuntu linux, fedoraproject fedora +2 more +4 more Twisted CRLF Injection CVE-2019-12387 Fix available 6.1 MediumJune 10, 2019
• twisted Forced Browsing in Twisted CVE-2016-1000111 Fix available 5.3 MediumJuly 18, 2016