GHSA-53XC-49M8-P798 Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer

Summary An unbounded-buffer vulnerability CWE-770 in the Twisted words IRC server lets any unauthenticated remote client exhaust server memory. twisted.words.protocols.irc.IRC.dataReceived appends every received byte to a per-connection buffer and only removes data at a line feed, with no maximum...

CVE-2026-115776 Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.dataReceived retains all bytes received without a line feed in its per-connection buffer and applies no maximum line length. The twisted.words.service.IRCUse...

CVE-2026-115776

The Twisted framework (Python 3.6+) is vulnerable to an unauthenticated Remote Denial of Service (DoS) in its IRC server. Specifically, the twisted.words.protocols.irc.IRC.dataReceived method retains bytes received without a line feed in a per-connection buffer without enforcing a maximum line le...