Astra Linux - уязвимость в twisted

In words.protocols.jabber.xmlstream in Twisted through version 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to intercept connections...

Denial of Service (DoS)

Overview Twisted is an event-based network programming and multi-protocol integration framework. Affected versions of this package are vulnerable to Denial of Service DoS by accepting an infinite amount of data for the peer's SSH version identifier. it is possible to be exploited via SSH transpor...

PYSEC-2019-128

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF...