Vulnerabilities for Twisted

First version without a known vulnerability: 26.4.0

Details

• GHSA-grgv-6hw6-v9g42026-05-05

  Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains

  Fixed in: 26.4.0rc2, 26.4.0

• GHSA-cf56-g6w6-pqq22024-07-29

  Twisted vulnerable to HTML injection in HTTP redirect body

  Fixed in: 24.7.0rc1, 046a164f89a0f08d3239ecebd750360f8914df33

• GHSA-c8m8-j448-xjx72024-07-29

  twisted.web has disordered HTTP pipeline response

  Fixed in: 24.7.0rc1

• GHSA-xc8x-vp79-p3wm2023-10-25

  twisted.web has disordered HTTP pipeline response

  Fixed in: 23.10.0rc1

• GHSA-vg46-2rrj-36472022-10-26

  Twisted vulnerable to NameVirtualHost Host header injection

  Fixed in: 22.10.0rc1

• GHSA-8r99-h8j2-rw642022-10-07

  Twisted vulnerable to HTTP Request Smuggling Attacks

  Fixed in: 20.3.0

• GHSA-c2jg-hw38-jrqq2022-04-04

  Inconsistent Interpretation of HTTP Requests in twisted.web

  Fixed in: 22.4.0, 592217e951363d60e9cd99c5bbfd23d4615043ac

• GHSA-32gv-6cf3-wcmq2022-03-14

  HTTP/2 DoS Attacks: Ping, Reset, and Settings Floods

  Fixed in: 19.10.0

• GHSA-rv6r-3f5q-9rgx2022-03-03

  Twisted SSH client and server deny of service during SSH handshake.

  Fixed in: 22.2.0, 89c395ee794e85a9657b112c4351417850330ef9

• GHSA-92x2-jw7w-xvvx2022-02-07

  Cookie and header exposure in twisted

  Fixed in: 22.1.0, af8fe78542a6f2bf2235ccee8158d9c88d31e8e2

• GHSA-3gqj-cmxr-p4x22021-04-30

  Forced Browsing in Twisted

  Fixed in: 16.3.1

• GHSA-h96w-mmrf-2h6v2020-03-31

  Improper Input Validation in Twisted

  Fixed in: 20.3.0, 20.3.0rc1

• GHSA-p5xh-vx83-mxcj2020-03-31

  HTTP Request Smuggling in Twisted

  Fixed in: 20.3.0, 20.3.0rc1

• GHSA-3c45-wgjp-7v9r2019-12-17

  Python Twisted trustRoot is not respected in HTTP client

  Fixed in: 14.0.1

• GHSA-65rm-h285-5cc52019-08-16

  Improper Certificate Validation in Twisted

  Fixed in: 19.7.0rc1

• GHSA-6cc5-2vg4-cc7m2019-06-10

  Twisted CRLF Injection

  Fixed in: 19.2.1, 6c61fc4503ae39ab8ecee52d10f10ee2c371d7e2