Log in Start free

twisted

Products

ProductCVEsExploitedLatest
twisted15–Oct 23, 2026
treq1–Feb 1, 2022

Exploited and recent CVEs

  • CVE-2026-115877 Medium 5.4 Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value 0.3%
  • CVE-2026-83813 Low 3.1 Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation 0.1%
  • CVE-2026-115778 High 7.5 Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer 0.5%
  • CVE-2026-115776 High 7.5 Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer 0.5%
  • CVE-2026-115775 High 8.7 Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree 0.4%
  • CVE-2026-115774 Medium 4.9 Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH 0.5%
  • CVE-2026-106454 Medium 4.3 Twisted: IMAP wildcardToRegexp() ReDoS 0.4%
  • CVE-2026-42304 High 7.5 Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains 0.4%
  • CVE-2024-41810 Medium 6.1 HTML injection in HTTP redirect body 1.2%
  • CVE-2024-41671 High 8.3 twisted.web has disordered HTTP pipeline response 0.9%
  • CVE-2023-46137 Medium 5.3 twisted.web has disordered HTTP pipeline response 0.9%
  • CVE-2022-39348 Medium 5.4 Twisted vulnerable to NameVirtualHost Host header injection 1.6%
  • CVE-2022-24801 High 8.1 HTTP Request Smuggling in twisted.web 2.8%
  • CVE-2022-21716 High 7.5 Buffer Overflow in Twisted 3.5%
  • CVE-2022-21712 High 7.5 Cookie and header exposure in twisted 1.4%
  • CVE-2022-23607 Medium 6.5 Unsafe handling of user-specified cookies in treq 1.1%