Medium
CVE-2026-106454
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 22
Reset filters
Medium
CVE-2026-77528
Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation
High
CVE-2024-52805
Synapse allows unsupported content types to lead to memory exhaustion
Medium
CVE-2024-41671
twisted.web has disordered HTTP pipeline response
Medium
CVE-2022-39348
Twisted vulnerable to NameVirtualHost Host header injection
Medium
CVE-2026-44546
daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake processing. Twisted does not treat \x0b, \x0c, \x1c, \x1d, \x1e, or \
High
CVE-2026-42304
Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains
Medium
CVE-2024-41810
Twisted vulnerable to HTML injection in HTTP redirect body
Medium
CVE-2023-46137
twisted.web has disordered HTTP pipeline response
Medium
ghsa-8r99-h8j2-rw64
Twisted vulnerable to HTTP Request Smuggling Attacks
Critical
CVE-2022-24801
Inconsistent Interpretation of HTTP Requests in twisted.web
Critical
ghsa-32gv-6cf3-wcmq
HTTP/2 DoS Attacks: Ping, Reset, and Settings Floods
High
CVE-2022-21716
Twisted SSH client and server deny of service during SSH handshake.
High
CVE-2022-21712
Cookie and header exposure in twisted
High
CVE-2022-23607
Unsafe handling of user-specified cookies in treq
Critical
CVE-2020-10109
HTTP Request Smuggling in Twisted
Critical
CVE-2020-10108
Improper Input Validation in Twisted
Medium
CVE-2016-1000111
Forced Browsing in Twisted
High
CVE-2015-8549
PyAMF vulnerable to XML external entity (XXE)
High
CVE-2014-7143
Python Twisted trustRoot is not respected in HTTP client
Critical
CVE-2019-12855
Improper Certificate Validation in Twisted
Medium
CVE-2019-12387
Twisted CRLF Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.