apricot-server (>=0.0.6, <=0.1.1), atxm (>=0.2.0, <=0.2.1) +19 more potentially affected by CVE-2024-41671 via twisted (23.10.0)

twisted PYPI version 23.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - apricot-server =0.0.6, =0.2.0, =3.10.1, =1.0.0, =23.11.0, =0.1.0, =1.1.0, =3.0.0, =4.2.0, =0.11.0, =7.1.1, =0.8.2, =0.9.0 - smpp-twisted3 0.8.0...

apricot-server (>=0.0.1, <=0.0.4), nucypher (>=7.0.0, <=7.0.4) +2 more potentially affected by CVE-2024-41671 via twisted (23.8.0)

twisted PYPI version 23.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - apricot-server =0.0.1, =7.0.0, =0.2.0, =0.4.1 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

geonode (3.3.3) potentially affected by CVE-2024-41671 via twisted (22.4.0rc1)

twisted PYPI version 22.4.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - geonode 3.3.3 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

nucypher (2.1.0b1) potentially affected by CVE-2024-41671 via twisted (20.3.0rc1)

twisted PYPI version 20.3.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - nucypher 2.1.0b1 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

cqc (>=3.1.0, <=3.2.1), nucypher (>=1.2.0b2, <=2.0.0b11) +5 more potentially affected by CVE-2024-41671 via twisted (19.10.0)

twisted PYPI version 19.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - cqc =3.1.0, =1.2.0b2, =0.5.5, =0.0.1, =3.0.7, =3.0.14 - txsshadmin 0.2.0 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

carly (>=0.1.0, <=0.10.1), carml (>=18.4.0, <=19.0.0) +10 more potentially affected by CVE-2024-41671 via twisted (18.9.0)

twisted PYPI version 18.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carly =0.1.0, =18.4.0, =2019.5.0, =0.1.0a2, =0.0.12, =0.100.2rc4, =1.2.1.0, =0.1.0, =0.1.1 - tx 0.0.2 Source cves: CVE-2024-41671 Source advisory...

golemrpc (>=0.3.4, <=0.3.6), neo-python (>=0.5.7, <=0.7.1) +5 more potentially affected by CVE-2024-41671 via twisted (17.9.0)

twisted PYPI version 17.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - golemrpc =0.3.4, =0.5.7, =0.1.0, =0.2.0, =0.2.1 - txwerewolves 0.6.1 - yy-spider 1.0.0 Source cves: CVE-2024-41671 Source advisory:...

crossbar (17.3.1) potentially affected by CVE-2024-41671 via twisted (17.1.0)

twisted PYPI version 17.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - crossbar 17.3.1 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

findontime (>=0.1.0, <=0.2.71) potentially affected by CVE-2024-41671 via twisted (16.7.0rc2)

twisted PYPI version 16.7.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - findontime =0.1.0, =0.2.71 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

fake-switches (>=1.4.3, <=1.5.0), paps-settings (>=0.2.4a0, <=0.2.6a0) +4 more potentially affected by CVE-2024-41671 via twisted (16.6.0)

twisted PYPI version 16.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - fake-switches =1.4.3, =0.2.4a0, =0.2.4, =1.1.4, =2.2.4, =2.2.6 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

billots (0.1.1) potentially affected by CVE-2024-41671 via twisted (17.5.0)

twisted PYPI version 17.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - billots 0.1.1 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

myriagon (16.10.0) potentially affected by CVE-2024-41671 via twisted (16.5.0rc1)

twisted PYPI version 16.5.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - myriagon 16.10.0 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

binance-connector (>=1.5.0, <=1.9.0), binance-futures-connector (1.5.0) +11 more potentially affected by CVE-2024-41671 via twisted (21.2.0)

twisted PYPI version 21.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-connector =1.5.0, =1.6.1, =0.1.9, =2019.2.3rc0, =0.0.0, =0.5.3, =0.8.0b1.post1, =0.8.0b1, =0.0.10, =0.0.2, =0.18.0, =0.21.1 Source cves:...

irrd (4.0.0), neural-mmo (>=1.5.1, <=1.5.2.2) +1 more potentially affected by CVE-2024-41671 via twisted (19.2.0)

twisted PYPI version 19.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - irrd 4.0.0 - neural-mmo =1.5.1, =1.5.2.2 - nmmo 1.5.3.2 Source cves: CVE-2024-41671 Source advisory: OSV:PYSEC-2026-1992...

Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to a sensitive information exposure in Twisted [CVE-2024-41671]

Summary IBM Watson Speech Services Cartridge is vulnerable to a sensitive information exposure in Twisted, caused by a flaw in HTTP 1.0 and 1.1 server CVE-2024-41671. Twisted is used by our Speech Service runtimes. This vulnerabilitiy has been addressed. Please read the details for remediation...

Medium: python-twisted

Issue Overview: Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1...

Medium: python-twisted

Issue Overview: Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a sensitive information exposure in Twisted [CVE-2024-41671]

Summary IBM Watson Speech Services Cartridge is vulnerable to a sensitive information exposure in Twisted, caused by a flaw in HTTP 1.0 and 1.1 server CVE-2024-41671. Twisted is used by our Speech Runtimes. This vulnerabilitiy has been addressed. Please read the details for remediation below...

openSUSE Security Advisory (SUSE-SU-2024:2860-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:2880-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...