CLEANSTART-2026-AF67526 Security fixes for CVE-2026-42304, CVE-2026-44307, CVE-2026-48522, CVE-2026-48523, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526, ghsa-2h4p-vjrc-8xpq, ghsa-grgv-6hw6-v9g4 applied in versions: 4.3.5-r0, 4.3.5-r1

Multiple security vulnerabilities affect the jupyterhub-k8s-hub package. These issues are resolved in later releases. See references for individual vulnerability details...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-42304)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-42304 advisory. - Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior t...

CVE-2026-42304 vulnerabilities

Vulnerabilities for packages: awx, synapse...

OESA-2026-2368 python-twisted security update

Twisted is an event-based framework for internet applications, supporting Python 2.7 and Python 3.5+. It includes modules for many different purposes, including the following: Security Fixes: A denial of service vulnerability exists in Twisted framework when handling DNS compression pointer chain...

OESA-2026-2367 python-twisted security update

Twisted is an event-based framework for internet applications, supporting Python 2.7 and Python 3.5+. It includes modules for many different purposes, including the following: Security Fixes: A denial of service vulnerability exists in Twisted framework when handling DNS compression pointer chain...

OESA-2026-2369 python-twisted security update

Twisted is an event-based framework for internet applications, supporting Python 2.7 and Python 3.5+. It includes modules for many different purposes, including the following: Security Fixes: A denial of service vulnerability exists in Twisted framework when handling DNS compression pointer chain...

CLEANSTART-2026-CR27895 Security fixes for CVE-2026-42304, CVE-2026-44307, ghsa-2h4p-vjrc-8xpq, ghsa-grgv-6hw6-v9g4 applied in versions: 4.3.5-r0

Multiple security vulnerabilities affect the jupyterhub-k8s-hub package. These issues are resolved in later releases. See references for individual vulnerability details...

python-Twisted-doc-26.4.0-1.1 on GA media (moderate)

python-Twisted-doc-26.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10759-1 Rating: moderate Cross-References: CVE-2026-42304 CVSS scores: CVE-2026-42304 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...

yabgp (0.5.0) potentially affected by CVE-2026-42304 via twisted (16.0.0)

twisted PYPI version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - yabgp 0.5.0 Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...

ethproxy (>=1.0.0, <=1.0.3) potentially affected by CVE-2026-42304 via twisted (16.1.1)

twisted PYPI version 16.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - ethproxy =1.0.0, =1.0.3 Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...

crossbar (17.3.1) potentially affected by CVE-2026-42304 via twisted (17.1.0)

twisted PYPI version 17.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - crossbar 17.3.1 Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...

binance-connector (>=1.5.0, <=1.9.0), binance-futures-connector (1.5.0) +11 more potentially affected by CVE-2026-42304 via twisted (21.2.0)

twisted PYPI version 21.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-connector =1.5.0, =1.6.1, =0.1.9, =2019.2.3rc0, =0.0.0, =0.5.3, =0.8.0b1.post1, =0.8.0b1, =0.0.10, =0.0.2, =0.18.0, =0.21.1 Source cves:...

carml (>=21.0.0, <=21.1.0), ctrader-fix (>=0.1.0, <=0.1.1) +17 more potentially affected by CVE-2026-42304 via twisted (21.7.0)

twisted PYPI version 21.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carml =21.0.0, =0.1.0, =0.4.0, =1.0.6, =0.0.1.dev15, =0.37.0, =0.1.2, =0.0.1, =0.1.0, =6.0.0, =6.0.2 and more Source cves: CVE-2026-42304 Source...

adyanutils (>=0.4.0, <=0.8.6), binance-futures-connector (>=1.6.0, <=1.7.0) +1 more potentially affected by CVE-2026-42304 via twisted (22.1.0)

twisted PYPI version 22.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - adyanutils =0.4.0, =1.6.0, =1.1.0, =1.1.2 Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...

ayugespidertools (>=3.4.1, <=3.9.5), baotool (1.0.1) +32 more potentially affected by CVE-2026-42304 via twisted (22.10.0)

twisted PYPI version 22.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - ayugespidertools =3.4.1, =0.2.0, =3.9.2, =1.1.2.post3, =0.7.2, =1.0.0, =1.0.0b2, =0.8.0, =0.1.12, =4.0.2, =0.1.2, =0.5.1 - jaseci-serv 1.4.2.5 a...

atxm (0.3.0), cli-progress (1.9.0) +7 more potentially affected by CVE-2026-42304 via twisted (24.3.0)

twisted PYPI version 24.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - atxm 0.3.0 - cli-progress 1.9.0 - ctrader-open-api =0.9.2, =0.2.8, =4.3.0, =7.3.0, =1.2.5, =0.3.0b0, =2.3.0rc39, =2.3.0rc40 Source cves:...

CVE-2026-42304

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of Service DoS attack via resource exhaustion during DNS name decompression. A remote, unauthenticated attacker can exploit this by sending...

UBUNTU-CVE-2026-42304

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of Service DoS attack via resource exhaustion during DNS name decompression. A remote, unauthenticated attacker can exploit this by sending...

CVE-2026-42304

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of Service DoS attack via resource exhaustion during DNS name decompression. A remote, unauthenticated attacker can exploit this by sending...

Linux Distros Unpatched Vulnerability : CVE-2026-42304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of...