Twisted - Open Redirect & XSS

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The Twisted web framework's redirectTo function is vulnerable to reflected XSS if an attacker can control the redirect URL. This template tests for an open redirect and XSS vulnerability in the URL parameter...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

socksmon

socksmon Monitor arbitrary TCP traffic using your HTTP interception proxy of choice What is socksmon? socksmon is a SOCKSv4 server based on Twisted, that tunnels incoming TCP traffic through an HTTP proxy. socksmon does this by starting an internal webserver on port 2357, posts the traffic to usi...

Security update for python-Twisted

This update for python-Twisted fixes the following issues: CVE-2026-83813: DNS spoofing in twisted.names due to missing source address validation bsc1287833. CVE-2026-106454: ReDoS due to improper use of re.compile in wildcardToRegexp bsc1284420. CVE-2026-115774: denial of service via negative si...

CVE-2026-106454 affecting package python-twisted for versions less than 22.10.0-7

CVE-2026-106454 affecting package python-twisted for versions less than 22.10.0-7. A patched version of the package is available...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : Twisted vulnerability (USN-9000-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has a package installed that is affected by a vulnerability as referenced in the USN-9000-1 advisory. It was discovered that Twisted's IMAP server mishandled wildcard patterns in mailbox list commands. An authenticated remote attack...

USN-9000-1: Twisted vulnerability

It was discovered that Twisted's IMAP server mishandled wildcard patterns in mailbox list commands. An authenticated remote attacker could possibly use this issue to cause Twisted to use excessive resources, leading to a denial of service...

CLSA-2026-1793702577 TuxCare security update for twisted (1 CVE)

TuxCare rebuilt twisted to address 1 CVE. Fixed in 20.3.0.post8+tuxcare...

OPENSUSE-SU-2026:12381-1 python-Twisted-doc-26.10.0-1.1 on GA media

These are all security issues fixed in the python-Twisted-doc-26.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

CLEANSTART-2026-TK78512 Twisted is an event-based framework for internet applications, supporting Python 3

CVE-2022-21716 affects multiple packages. Twisted is an event-based framework for internet applications, supporting Python 3. See references for individual vulnerability details...

CLEANSTART-2024-EF11123 Synapse is a package for Matrix homeservers written in Python 3/Twisted

Security vulnerability affects the synapse package. Synapse is a package for Matrix homeservers written in Python 3/Twisted...

CLEANSTART-2026-PG45688 Twisted before 16

CVE-2016-1000111 affects multiple packages. Twisted before 16. See references for individual vulnerability details...

CLEANSTART-2026-IF61751 In Twisted before 19

CVE-2019-12387 affects multiple packages. In Twisted before 19. See references for individual vulnerability details...

CLEANSTART-2026-ZF43010 In Twisted Web through 19

CVE-2020-10109 affects multiple packages. In Twisted Web through 19. See references for individual vulnerability details...

CLEANSTART-2026-SV32355 Twisted is an event-based framework for internet applications, supporting Python 3

Security vulnerability affects the py3-twisted package. Twisted is an event-based framework for internet applications, supporting Python 3...

CLEANSTART-2026-UF19432 Twisted is an event-based framework for internet applications, supporting Python 3

Security vulnerability affects the py3-prometheus-client package. Twisted is an event-based framework for internet applications, supporting Python 3...

Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset

Summary An uncontrolled-resource-consumption vulnerability CWE-400 in the Twisted HTTP/2 server lets any unauthenticated remote client exhaust server CPU over a single connection. A client that sends a request header block with ENDSTREAM and then immediately resets the stream makes the server rou...

adyanutils (>=0.4.0, <=0.8.6), apricot-server (>=0.0.1, <=0.1.1) +200 more potentially affected by CVE-2023-44487 via twisted (>=16.0.0, <=26.4.0)

twisted PYPI version =16.0.0, =0.4.0, =0.0.1, =0.1.3, =0.2.0, =3.4.1, =1.5.0, =1.5.0, =0.2.0, =0.0.2, =1.9.0, =1.4.13, =1.15.89 and more Source cves: CVE-2023-44487 Source advisory: GHSA-VPP8-G58W-M8MP...

GHSA-VPP8-G58W-M8MP Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset

Summary An uncontrolled-resource-consumption vulnerability CWE-400 in the Twisted HTTP/2 server lets any unauthenticated remote client exhaust server CPU over a single connection. A client that sends a request header block with ENDSTREAM and then immediately resets the stream makes the server rou...

SUSE CVE-2026-83813

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but does not verify that the response came from the queried host...