Skip to content
OpenAdvisories
High DLA-2991-1 1 CVE

twisted - security update

Published May 3, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 twisted 16.6.0-2+deb9u3

Vulnerabilities 1

  • High 8.1
    CVE-2022-24801

    HTTP Request Smuggling in twisted.web

    Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to version 22.4.0rc1, the Twisted Web HTTP 1.1 server, located in the `twisted.web.http` module, parsed several HTTP request constructs more leniently than permitted …

    twisted twisted twisted twisted Debian Ubuntu Alpine PyPI