CRITICALPyPI
GHSA-32gv-6cf3-wcmqHTTP/2 DoS Attacks: Ping, Reset, and Settings Floods
Modified: 2/18/2025
package
PyPI/twisted
pkg:pypi/twisted
HIGH7.5PyPI
GHSA-3c45-wgjp-7v9r· CVE-2014-7143, PYSEC-2019-212Python Twisted trustRoot is not respected in HTTP client
Modified: 11/25/2024
MEDIUM5.3PyPI
GHSA-3gqj-cmxr-p4x2· CVE-2016-1000111, PYSEC-2020-214Forced Browsing in Twisted
Modified: 11/18/2024
HIGH7.4PyPI
GHSA-65rm-h285-5cc5· CVE-2019-12855, PYSEC-2019-129Improper Certificate Validation in Twisted
Modified: 12/6/2024
MEDIUM6.1PyPI
GHSA-6cc5-2vg4-cc7m· CVE-2019-12387, PYSEC-2019-128Twisted CRLF Injection
Modified: 11/25/2024
MEDIUMPyPI
GHSA-8r99-h8j2-rw64Twisted vulnerable to HTTP Request Smuggling Attacks
Modified: 11/30/2024
HIGH7.5PyPI
GHSA-92x2-jw7w-xvvx· CVE-2022-21712, PYSEC-2022-27Cookie and header exposure in twisted
Modified: 11/25/2024
HIGH8.1PyPI
GHSA-c2jg-hw38-jrqq· CVE-2022-24801, PYSEC-2022-195Inconsistent Interpretation of HTTP Requests in twisted.web
Modified: 11/25/2024
HIGH8.3PyPI
GHSA-c8m8-j448-xjx7· CVE-2024-41671, PYSEC-2026-1992twisted.web has disordered HTTP pipeline response
Modified: 7/7/2026
MEDIUM6.1PyPI
GHSA-cf56-g6w6-pqq2· CVE-2024-41810, PYSEC-2024-75Twisted vulnerable to HTML injection in HTTP redirect body
Modified: 11/4/2025
HIGH7.5PyPI
GHSA-grgv-6hw6-v9g4· CVE-2026-42304, PYSEC-2026-160Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains
Modified: 9/10/2026
CRITICAL9.8PyPI
GHSA-h96w-mmrf-2h6v· CVE-2020-10108, PYSEC-2020-259Improper Input Validation in Twisted
Modified: 11/25/2024
CRITICAL9.8PyPI
GHSA-p5xh-vx83-mxcj· CVE-2020-10109, PYSEC-2020-260HTTP Request Smuggling in Twisted
Modified: 11/25/2024
HIGH7.5PyPI
GHSA-rv6r-3f5q-9rgx· CVE-2022-21716, PYSEC-2022-160Twisted SSH client and server deny of service during SSH handshake.
Modified: 11/25/2024
MEDIUM5.4PyPI
GHSA-vg46-2rrj-3647· CVE-2022-39348, PYSEC-2026-1055Twisted vulnerable to NameVirtualHost Host header injection
Modified: 7/7/2026
MEDIUM5.3PyPI
GHSA-xc8x-vp79-p3wm· CVE-2023-46137, PYSEC-2023-224twisted.web has disordered HTTP pipeline response
Modified: 11/4/2025
—PyPI
PYSEC-2019-128· CVE-2019-12387, GHSA-6cc5-2vg4-cc7mModified: 11/8/2023
—PyPI
PYSEC-2019-129· CVE-2019-12855, GHSA-65rm-h285-5cc5Modified: 11/8/2023
—PyPI
PYSEC-2019-212· CVE-2014-7143, GHSA-3c45-wgjp-7v9rModified: 11/8/2023
—PyPI
PYSEC-2020-214· CVE-2016-1000111, GHSA-3gqj-cmxr-p4x2Modified: 11/8/2023
—PyPI
PYSEC-2020-259· CVE-2020-10108, GHSA-h96w-mmrf-2h6vModified: 11/8/2023
—PyPI
PYSEC-2020-260· CVE-2020-10109, GHSA-p5xh-vx83-mxcjModified: 11/8/2023
—PyPI
PYSEC-2022-160· CVE-2022-21716, GHSA-rv6r-3f5q-9rgxModified: 11/8/2023
—PyPI
PYSEC-2022-195· CVE-2022-24801, GHSA-c2jg-hw38-jrqqModified: 11/8/2023
—PyPI
PYSEC-2022-27· CVE-2022-21712, GHSA-92x2-jw7w-xvvxModified: 11/8/2023
MEDIUM5.3PyPI
PYSEC-2023-224· CVE-2023-46137, GHSA-xc8x-vp79-p3wmModified: 11/8/2023
MEDIUM6.1PyPI
PYSEC-2024-75· CVE-2024-41810, GHSA-cf56-g6w6-pqq2Modified: 9/11/2024
MEDIUM5.4PyPI
PYSEC-2026-1055· CVE-2022-39348, GHSA-vg46-2rrj-3647Twisted vulnerable to NameVirtualHost Host header injection
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-160· CVE-2026-42304, GHSA-grgv-6hw6-v9g4Modified: 5/20/2026
HIGH8.3PyPI
PYSEC-2026-1992· CVE-2024-41671, GHSA-c8m8-j448-xjx7twisted.web has disordered HTTP pipeline response
Modified: 7/7/2026