In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability

In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability

Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree

Twisted is an event-based framework for internet applications, supporting Python 3.6+

Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer

Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer

Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains

Twisted is an event-based framework for internet applications, supporting Python 3.6+

twisted is an event-driven networking engine written in Python

Python Twisted 14.0 trustRoot is not respected in HTTP client

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections

Twisted is an event-based framework for internet applications, supporting Python 3.6+

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF

Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value

Twisted vulnerable to NameVirtualHost Host header injection

Twisted is an event-based framework for internet applications

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client…

Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH

Twisted: IMAP wildcardToRegexp() ReDoS

Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation