Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | twisted | 18.9.0-3+deb10u2 |
Vulnerabilities 1
-
Medium 5.4
Twisted vulnerable to NameVirtualHost Host header injection
Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host header does not match a configured host `twisted.web.vhost.NameVirtualHost` will return a `NoResource` resource which renders the Host header unescaped in…