Executive brief
Twisted vulnerable to NameVirtualHost Host header injection
Affected products
- PyPI twisted
Junglewise Threat Intelligence
CVE-2022-39348: PYSEC-2026-1055 - Twisted vulnerable to NameVirtualHost Host header injection
CVE-2022-39348 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: twisted (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1992 - twisted.web has disordered HTTP pipeline response
- Twisted Denial of Service via DNS compression pointer chains
- PYSEC-2024-75 - Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo` function contains a
- PYSEC-2023-224 - Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP p
- PYSEC-2022-195 - Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to version 22.4.0rc1, the Twisted Web HTTP 1.1