twisted - security update

Fixed packages 1

Vulnerabilities 4

• High 8.3
  CVE-2024-41671

  twisted.web has disordered HTTP pipeline response

  Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is …

  twisted twisted synapse twisted Debian Ubuntu Azure Linux Alpine PyPI
  Jul 29, 2024
• Medium 6.1
  CVE-2024-41810 Scanner template

  HTML injection in HTTP redirect body

  Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo` function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability m…

  twisted twisted twisted twisted Debian Ubuntu Azure Linux PyPI
  Jul 29, 2024
• Medium 5.4
  CVE-2022-39348

  Twisted vulnerable to NameVirtualHost Host header injection

  Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host header does not match a configured host `twisted.web.vhost.NameVirtualHost` will return a `NoResource` resource which renders the Host header unescaped in…

  twisted twisted twisted twisted Debian Ubuntu Azure Linux PyPI
  Oct 26, 2022
• Medium 5.3
  CVE-2023-46137

  twisted.web has disordered HTTP pipeline response

  Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endp…

  twisted twisted twisted twisted Debian Ubuntu Azure Linux PyPI
  Oct 25, 2023