Search for packages
| purl | pkg:deb/debian/twisted@18.9.0-7?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-7d7z-nhf1-kyhc | In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request. |
CVE-2020-10109
GHSA-p5xh-vx83-mxcj PYSEC-2020-260 |
| VCID-szfx-665h-w3eb | In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections. |
CVE-2019-12855
GHSA-65rm-h285-5cc5 PYSEC-2019-129 |
| VCID-vcw1-fzw7-43f5 | In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set to zero, the request body was interpreted as a pipelined request. |
CVE-2020-10108
GHSA-h96w-mmrf-2h6v PYSEC-2020-259 |
| VCID-zx5n-czhy-6qgu | In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF. |
CVE-2019-12387
GHSA-6cc5-2vg4-cc7m PYSEC-2019-128 |