TW
Vendor
twisted
21
CVEs
0
On KEV
7
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115877 New | TW twisted twisted | 5.4 | Oct 23 | Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value |
| CVE-2026-83813 New | TW twisted twisted | 3.1 | Oct 23 | Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation |
| CVE-2026-115778 New | TW twisted twisted | 7.5 | Oct 23 | Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer |
| CVE-2026-115776 New | TW twisted twisted | 7.5 | Oct 23 | Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer |
| CVE-2026-115775 New | TW twisted twisted | 8.7 | Oct 23 | Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree |
| CVE-2026-115774 New | TW twisted twisted | 4.9 | Oct 23 | Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH |
| CVE-2026-106454 | TW twisted twisted | 4.3 | Oct 6 | Twisted: IMAP wildcardToRegexp() ReDoS |
| CVE-2026-42304 | TW twisted twisted | 7.5 | May 13 | Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains |
| CVE-2024-41810 | TW twisted twisted | 6.1 | Jul 29 | HTML injection in HTTP redirect body |
| CVE-2024-41671 | TW twisted twisted | 8.3 | Jul 29 | twisted.web has disordered HTTP pipeline response |
| CVE-2023-46137 | TW twisted twisted | 5.3 | Oct 25 | twisted.web has disordered HTTP pipeline response |
| CVE-2022-39348 | TW twisted twisted | 5.4 | Oct 26 | Twisted vulnerable to NameVirtualHost Host header injection |
| CVE-2022-24801 | TW Twisted Twisted | 8.1 | Apr 4 | Twisted is an event-based framework for internet applications, supporting Python 3.6+ |
| CVE-2022-21716 | TW Twisted Twisted | 7.5 | Mar 3 | Twisted is an event-based framework for internet applications, supporting Python 3.6+ |
| CVE-2022-21712 | TW Twisted Twisted | 7.5 | Feb 7 | twisted is an event-driven networking engine written in Python |
| CVE-2020-10109 | TW Twisted Twisted | 9.8 | Mar 12 | In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability |
| CVE-2020-10108 | TW Twisted Twisted | 9.8 | Mar 12 | In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability |
| CVE-2016-1000111 | TW Twisted Twisted | 5.3 | Mar 11 | Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client… |
| CVE-2014-7143 | TW Twisted Twisted | 7.5 | Nov 12 | Python Twisted 14.0 trustRoot is not respected in HTTP client |
| CVE-2019-12855 | TW Twisted Twisted | 7.4 | Jun 16 | In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections |
| CVE-2019-12387 | TW Twisted Twisted | 6.1 | Jun 10 | In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF |