34 matches found
2adif (=0.1.0), 3robotics (=0.0.1) +1562 more potentially affected by CVE-2026-42304 via twisted (>=16.0.0 <=25.5.0)
twisted PYPI version =16.0.0, =0.0.12, =3.0.9, =3.0.0, =0.1.0, =23.12.0rc1, =0.10.0, =0.0.1, =0.4.0, =3.0.0, =0.1.4, =1.0.0, =1.0.2 - aha-scrapyd =1.3.0 and more Source cves: CVE-2026-42304 Source advisory: OSV:PYSEC-2026-160...
Linux Distros Unpatched Vulnerability : CVE-2026-42304
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of...
2adif (=0.1.0), 3robotics (=0.0.1) +1562 more potentially affected by CVE-2026-42304 via twisted (>=16.0.0 <=25.5.0)
twisted PYPI version =16.0.0, =0.0.12, =3.0.9, =3.0.0, =0.1.0, =23.12.0rc1, =0.10.0, =0.0.1, =0.4.0, =3.0.0, =0.1.4, =1.0.0, =1.0.2 - aha-scrapyd =1.3.0 and more Source cves: CVE-2026-42304 Source advisory: OSV:GHSA-GRGV-6HW6-V9G4...
Astra Linux - уязвимость в twisted
Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endpoints is controlled by an attacker, th...
Astra Linux - уязвимость в twisted
In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF...
Security Bulletin: Vulnerability Werkzeug, Twisted-22.10.0-py3, requests-2.32.2-py3, commons-lang-2.6, commons-fileupload-1.5, urllib3-2.2.2, jetty-server-9.4.56.v20240826 affect IBM Cloud Object Storage Systems (Oct 2025)
Summary Vulnerability with Werkzeug CVE-2024-34069, CVE-2023-46136 ,CVE-2024-49767, CVE-2024-49766 Twisted-22.10.0-py3 CVE-2024-41810, CVE-2023-46137, CVE-2024-41671, requests-2.32.2-py3 CVE-2024-47081, urllib3-2.2.2 CVE-2025-50182,CVE-2025-501810 commons-lang-2.6CVE-2025-48924,...
2adif (=0.1.0), 3robotics (=0.0.1) +1563 more potentially affected by CVE-2025-50688 via twisted (>=16.0.0 <=26.4.0rc2)
twisted PYPI version =16.0.0, =0.0.12, =3.0.9, =3.0.0, =0.1.0, =23.12.0rc1, =0.10.0, =0.0.1, =0.4.0, =3.0.0, =0.1.4, =1.0.0, =1.0.2 - aha-scrapyd =1.3.0 and more Source cves: CVE-2025-50688 Source advisory: SNYK:PYTHON-TWISTED-12671201...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a sensitive information exposure in Twisted [CVE-2024-41671]
Summary IBM Watson Speech Services Cartridge is vulnerable to a sensitive information exposure in Twisted, caused by a flaw in HTTP 1.0 and 1.1 server CVE-2024-41671. Twisted is used by our Speech Runtimes. This vulnerabilitiy has been addressed. Please read the details for remediation below...
CBL Mariner 2.0 Security Update: python-twisted (CVE-2023-46137)
The version of python-twisted installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-46137 advisory. - Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when...
Azure Linux 3.0 Security Update: python-twisted (CVE-2024-41810)
The version of python-twisted installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41810 advisory. - Twisted is an event-based framework for internet applications, supporting Python 3.6+. The...
USN-6988-2 twisted vulnerability
USN-6988-1 fixed CVE-2024-41671 in Twisted. The USN incorrectly stated that previous releases were unaffected. This update provides the equivalent fix for Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: Ben Kallus discovered that Twisted incorrectly handled...
USN-6988-2: Twisted vulnerability
USN-6988-1 fixed CVE-2024-41671 in Twisted. The USN incorrectly stated that previous releases were unaffected. This update provides the equivalent fix for Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: Ben Kallus discovered that Twisted incorrectly handled...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Twisted vulnerability (USN-6988-2)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6988-2 advisory. USN-6988-1 fixed CVE-2024-41671 in Twisted. The USN incorrectly stated that previous releases were unaffected. This update provides the...
adyanutils (>=0.4.0 <=0.8.6), apricot-server (>=0.0.1 <=0.1.1) +168 more potentially affected by CVE-2024-4167 +1 more via twisted (>=16.0.0 <=24.7.0)
twisted PYPI version =16.0.0, =0.4.0, =0.0.1, =0.2.0, =3.4.1, =1.5.0, =1.5.0, =0.2.0, =0.0.2, =1.9.0, =0.2.86, =202406.1129.0, =202504.1174.0 and more Source cves: CVE-2024-4167, CVE-2024-41671 Source advisory: OSV:GHSA-C8M8-J448-XJX7...
adyanutils (>=0.4.0 <=0.8.6), apricot-server (>=0.0.1 <=0.1.1) +168 more potentially affected by CVE-2024-41810 via twisted (>=16.0.0 <=24.7.0)
twisted PYPI version =16.0.0, =0.4.0, =0.0.1, =0.2.0, =3.4.1, =1.5.0, =1.5.0, =0.2.0, =0.0.2, =1.9.0, =0.2.86, =202406.1129.0, =202504.1174.0 and more Source cves: CVE-2024-41810 Source advisory: OSV:PYSEC-2024-75...
adyanutils (>=0.4.0 <=0.8.6), apricot-server (>=0.0.6 <=0.1.1) +151 more potentially affected by CVE-2023-46137 via twisted (>=16.0.0 <=23.10.0)
twisted PYPI version =16.0.0, =0.4.0, =0.0.6, =0.2.0, =3.4.1, =1.5.0, =1.5.0, =0.2.0, =0.0.2, =3.9.2, =1.0.0, =1.1.0 and more Source cves: CVE-2023-46137 Source advisory: OSV:GHSA-XC8X-VP79-P3WM...
ayugespidertools (>=3.4.1 <=3.9.5), baotool (=1.0.1) +129 more potentially affected by CVE-2022-39348 via twisted (>=16.0.0 <=22.10.0)
twisted PYPI version =16.0.0, =3.4.1, =1.5.0, =0.2.0, =0.0.2, =3.9.2, =0.1.0.dev2, =0.3.4, =0.1.0, =18.4.0, =1.1.2.post3, =1.2.0.post1 and more Source cves: CVE-2022-39348 Source advisory: OSV:GHSA-VG46-2RRJ-3647...
Ubuntu 22.04 LTS : Twisted vulnerability (USN-5576-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5576-1 advisory. It was discovered that Twisted incorrectly parsed some types of HTTP requests in its web server implementation. In certain proxy or multi-server configurations, a...
adyanutils (>=0.4.0 <=0.8.6), ayugespidertools (>=3.4.1 <=3.9.5) +130 more potentially affected by CVE-2022-24801 via twisted (>=16.0.0 <=22.2.0)
twisted PYPI version =16.0.0, =0.4.0, =3.4.1, =1.5.0, =1.5.0, =0.2.0, =0.0.2, =3.9.2, =0.1.0.dev2, =0.3.4, =0.1.0, =18.4.0, =21.1.0 and more Source cves: CVE-2022-24801 Source advisory: OSV:GHSA-C2JG-HW38-JRQQ...
adyanutils (>=0.4.0 <=0.8.6), ayugespidertools (>=3.4.1 <=3.9.5) +130 more potentially affected by CVE-2022-24801 via twisted (>=16.0.0 <=22.2.0)
twisted PYPI version =16.0.0, =0.4.0, =3.4.1, =1.5.0, =1.5.0, =0.2.0, =0.0.2, =3.9.2, =0.1.0.dev2, =0.3.4, =0.1.0, =18.4.0, =21.1.0 and more Source cves: CVE-2022-24801 Source advisory: OSV:PYSEC-2022-195...