Vendor

    Twisted

    22 known vulnerabilities in products by Twisted, 0 of them actively exploited (CISA KEV).

    Key figures

    22

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Twisted
    CriticalCVE-2020-10108

    Twisted: security vulnerability

    also in 5 other products

    		9.8
    CriticalCVE-2020-10109

    Twisted: security vulnerability

    also in 3 other products

    		9.8
    HighCVE-2022-21716

    Buffer Overflow in Twisted

    also in 4 other products

    		7.5
    HighCVE-2022-24801

    HTTP Request Smuggling in twisted.web

    also in 3 other products

    		8.1
    HighCVE-2014-7143

    Twisted: security vulnerability

    		7.5
    MediumCVE-2019-12387

    Twisted: security vulnerability

    also in 4 other products

    		6.1
    HighCVE-2019-12855

    Twisted: security vulnerability

    		7.4
    MediumCVE-2016-1000111

    Twisted: security vulnerability

    		5.3
    HighCVE-2026-115775

    Twisted: Allocation of Resources Without Limits or Throttling

    		—
    HighCVE-2026-115778

    Twisted: Allocation of Resources Without Limits or Throttling

    		7.5
    HighCVE-2026-115776

    Twisted: Allocation of Resources Without Limits or Throttling

    		7.5
    HighCVE-2022-21712

    Cookie and header exposure in twisted

    also in 2 other products

    		7.5
    HighCVE-2024-41671

    twisted.web has disordered HTTP pipeline response

    also in 1 other product

    		8.3
    MediumCVE-2022-39348

    Twisted vulnerable to NameVirtualHost Host header injection

    also in 1 other product

    		5.4
    MediumCVE-2024-41810

    HTML injection in HTTP redirect body

    also in 1 other product

    		6.1
    MediumCVE-2026-115774

    Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH

    		4.9
    MediumCVE-2022-23607

    Unsafe handling of user-specified cookies in treq

    also in 1 other product

    		6.5
    HighCVE-2026-42304

    Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains

    also in 1 other product

    		7.5
    MediumCVE-2026-106454

    Twisted: IMAP wildcardToRegexp() ReDoS

    		4.3
    MediumCVE-2026-115877

    Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value

    		5.4
    MediumCVE-2023-46137

    twisted.web has disordered HTTP pipeline response

    also in 1 other product

    		5.3
    LowCVE-2026-83813

    Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation

    		3.1

    Products

    Products by Twisted
    Twisted210