Login Request a demo
TW
Product
twisted
by twisted · last CVE Oct 23, 2026
20
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 2High 9Medium 8Low 1
Severity
All severities20Critical2High9Medium8Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add twisted to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-115775
New
8.7
0%
Oct 23
Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
Affected: < 26.10.0rc1
CVE-2022-24801
8.1
3%
Apr 4
Twisted is an event-based framework for internet applications, supporting Python 3.6+
Affected: before 22.4.0
CVE-2026-115778
New
7.5
1%
Oct 23
Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
Affected: < 26.10.0rc1
CVE-2026-115776
New
7.5
1%
Oct 23
Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
Affected: < 26.10.0rc1
CVE-2026-42304
7.5
0%
May 13
Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains
Affected: < 26.4.0rc2
CVE-2022-21716
7.5
4%
Mar 3
Twisted is an event-based framework for internet applications, supporting Python 3.6+
Affected: 21.7.0 before 22.2.0
CVE-2022-21712
7.5
1%
Feb 7
twisted is an event-driven networking engine written in Python
Affected: 11.1.0 before 22.1.0
CVE-2014-7143
7.5
3%
Nov 12
Python Twisted 14.0 trustRoot is not respected in HTTP client
Affected: 14.0.0
CVE-2019-12855
7.4
2%
Jun 16
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections
Affected: through 19.2.1
Showing 9