Skip to content
OpenAdvisories

Vendor

twisted

16 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Low 3.1

    Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation

    Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but does not verify that th…