| Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream ResetGHSA-VPP8-G58W-M8MP |
twisted |
PyPI |
High
|
Fix reported |
|
| Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address ValidationCVE-2026-83813 · GHSA-JJ36-9PVH-VJ5R |
twistedRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 |
PyPIRed Hat |
Low
|
Fix reported |
|
| Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element TreeCVE-2026-115775 · GHSA-3476-C5C2-FR73 |
twistedRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 |
PyPIRed Hat |
High
|
Fix reported |
|
| Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line BufferCVE-2026-115776 · GHSA-53XC-49M8-P798 |
twistedRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 |
PyPIRed Hat |
High
|
Fix reported |
|
| Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation BufferCVE-2026-115778 · GHSA-CWM5-JH59-MWXR |
twistedRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 |
PyPIRed Hat |
High
|
Fix reported |
|
| Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header ValueCVE-2026-115877 · GHSA-Q7QQ-6MHP-9RC4 |
twistedRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCHCVE-2026-115774 · GHSA-2QRF-PQGX-QH9V |
twistedRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Twisted: IMAP wildcardToRegexp() ReDoSCVE-2026-106454 · GHSA-8PQF-F4M5-798GVersion ranges need review. |
twistedRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 |
PyPIRed Hat |
Medium
|
No fix reported |
|
| Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer ChainsCVE-2026-42304 · GHSA-GRGV-6HW6-V9G4Version ranges need review. |
twistedRed Hat Enterprise Linux 6/python-twisted |
PyPIRed Hat |
High
|
Fix reported |
|
| twisted.web has disordered HTTP pipeline responseCVE-2024-41671 · GHSA-C8M8-J448-XJX7Version ranges need review. |
twisted |
PyPI |
Medium
|
Fix reported |
|
| Twisted vulnerable to NameVirtualHost Host header injectionCVE-2022-39348 · GHSA-VG46-2RRJ-3647Version ranges need review. |
twistedRed Hat Ansible Automation Platform 1.2/twisted[tls] |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Twisted vulnerable to HTML injection in HTTP redirect bodyCVE-2024-41810 · GHSA-CF56-G6W6-PQQ2Version ranges need review. |
twistedRed Hat Ansible Automation Platform 1.2/ansible-tower |
PyPIRed Hat |
Medium
|
Fix reported |
|
| twisted.web has disordered HTTP pipeline responseCVE-2023-46137 · GHSA-XC8X-VP79-P3WMVersion ranges need review. |
twistedRed Hat Ansible Automation Platform 1.2/ansible-tower |
PyPIRed Hat |
Medium
|
Fix reported |
|
| HTTP/2 DoS Attacks: Ping, Reset, and Settings FloodsGHSA-32GV-6CF3-WCMQ |
twisted |
PyPI |
Critical
|
Fix reported |
|
| Improper Certificate Validation in TwistedCVE-2019-12855 · GHSA-65RM-H285-5CC5Version ranges need review. |
twistedRed Hat Ceph Storage 2/calamari-server |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Twisted vulnerable to HTTP Request Smuggling AttacksGHSA-8R99-H8J2-RW64 |
twisted |
PyPI |
Medium
|
Fix reported |
|
| Python Twisted trustRoot is not respected in HTTP clientCVE-2014-7143 · GHSA-3C45-WGJP-7V9RVersion ranges need review. |
twisted |
PyPI |
High
|
Fix reported |
|
| Inconsistent Interpretation of HTTP Requests in twisted.webCVE-2022-24801 · GHSA-C2JG-HW38-JRQQVersion ranges need review. |
twistedRed Hat Ceph Storage 2/python-twisted |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Cookie and header exposure in twistedCVE-2022-21712 · GHSA-92X2-JW7W-XVVXVersion ranges need review. |
twistedRed Hat Ansible Automation Platform 1.2/twisted[tls] |
PyPIRed Hat |
High
|
Fix reported |
|
| Twisted SSH client and server deny of service during SSH handshake.CVE-2022-21716 · GHSA-RV6R-3F5Q-9RGXVersion ranges need review. |
twistedRed Hat Ansible Automation Platform 2/automation-controller |
PyPIRed Hat |
High
|
Fix reported |
|
