Login Request a demo
TW
Product
twisted
by twisted · last CVE Oct 23, 2026
20
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 2High 9Medium 8Low 1
Severity
All severities20Critical2High9Medium8Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add twisted to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-41810
6.1
1%
Jul 29
Twisted is an event-based framework for internet applications, supporting Python 3.6+
Affected: through 24.3.0
CVE-2019-12387
6.1
3%
Jun 10
In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF
Affected: before 19.2.1
CVE-2026-115877
New
5.4
0%
Oct 23
Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
Affected: < 26.10.0rc1
CVE-2022-39348
5.4
2%
Oct 26
Twisted vulnerable to NameVirtualHost Host header injection
Affected: >= 0.9.4, < 22.10.0rc1
CVE-2023-46137
5.3
1%
Oct 25
Twisted is an event-based framework for internet applications
Affected: through 22.8.0
CVE-2016-1000111
5.3
3%
Mar 11
Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client…
Affected: before 16.3.1
CVE-2026-115774
New
4.9
0%
Oct 23
Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
Affected: < 26.10.0rc1
CVE-2026-106454
4.3
0%
Oct 6
Twisted: IMAP wildcardToRegexp() ReDoS
Affected: <= 25.5.0
Showing 8