Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/python-twisted-web@12.1.0-7?arch=el7_8
purl pkg:rpm/redhat/python-twisted-web@12.1.0-7?arch=el7_8
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-7d7z-nhf1-kyhc
Aliases:
CVE-2020-10109
GHSA-p5xh-vx83-mxcj
PYSEC-2020-260
In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request. There are no reported fixed by versions.
VCID-vcw1-fzw7-43f5
Aliases:
CVE-2020-10108
GHSA-h96w-mmrf-2h6v
PYSEC-2020-259
In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set to zero, the request body was interpreted as a pipelined request. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:10:04.205040+00:00 RedHat Importer Affected by VCID-7d7z-nhf1-kyhc https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10109.json 38.0.0
2026-04-01T14:10:04.179541+00:00 RedHat Importer Affected by VCID-vcw1-fzw7-43f5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-10108.json 38.0.0