Skip to content
OpenAdvisories
High DSA-5797-1 3 CVEs

twisted - security update

Published Oct 25, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 12 twisted 22.4.0-4+deb12u1

Vulnerabilities 3

  • High 8.3
    CVE-2024-41671

    twisted.web has disordered HTTP pipeline response

    Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is …

    twisted twisted synapse twisted Debian Ubuntu Azure Linux Alpine PyPI
  • Medium 6.1
    CVE-2024-41810 Scanner template

    HTML injection in HTTP redirect body

    Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo` function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability m…

    twisted twisted twisted twisted Debian Ubuntu Azure Linux PyPI
  • Medium 5.3
    CVE-2023-46137

    twisted.web has disordered HTTP pipeline response

    Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endp…

    twisted twisted twisted twisted Debian Ubuntu Azure Linux PyPI