{"schema_version":1,"title":"Twisted vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 10 vulnerabilities in Twisted: 0 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, Twisted HTTP/2 server denial of service via rapid stream reset, was published on 29 October 2026. 6 vulnerabilities in the last four weeks, up 500% on the four before (1). 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/twisted","json_url":"https://junglewise.ai/threats/vendors/twisted.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/twisted","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":4,"all_time":10,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":6,"last_90_days":7,"last_365_days":7},"latest":[{"cvss":7.5,"slug":"twisted-unauthenticated-remote-denial-of-service-in-the-twisted-http-2-0f2d7a0e","title":"Twisted HTTP/2 server denial of service via rapid stream reset","severity":"high","exploited":false,"published_at":"2026-10-29T16:41:06+00:00","url":"https://junglewise.ai/threats/twisted-unauthenticated-remote-denial-of-service-in-the-twisted-http-2-0f2d7a0e"},{"cve":"CVE-2026-115877","cvss":5.4,"epss":0.0033,"slug":"cve-2026-115877-twisted-http-request-smuggling-in-twisted-web-via-a-bare-cr-or","title":"Twisted HTTP request smuggling via bare CR or LF in header","severity":"medium","exploited":false,"published_at":"2026-10-23T21:17:23.643+00:00","url":"https://junglewise.ai/threats/cve-2026-115877-twisted-http-request-smuggling-in-twisted-web-via-a-bare-cr-or"},{"cve":"CVE-2026-115778","cvss":7.5,"epss":0.0074,"slug":"cve-2026-115778-twisted-unauthenticated-remote-denial-of-service-in-the-twisted","title":"Twisted conch telnet unbounded subnegotiation buffer denial of service","severity":"high","exploited":false,"published_at":"2026-10-23T21:17:23.32+00:00","url":"https://junglewise.ai/threats/cve-2026-115778-twisted-unauthenticated-remote-denial-of-service-in-the-twisted"},{"cve":"CVE-2026-115776","cvss":7.5,"epss":0.0074,"slug":"cve-2026-115776-twisted-unauthenticated-remote-denial-of-service-in-the-twisted","title":"Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.","severity":"high","exploited":false,"published_at":"2026-10-23T21:17:23.18+00:00","url":"https://junglewise.ai/threats/cve-2026-115776-twisted-unauthenticated-remote-denial-of-service-in-the-twisted"},{"cve":"CVE-2026-115775","cvss":4,"epss":0.0044,"slug":"cve-2026-115775-twisted-unauthenticated-remote-denial-of-service-in-the-twisted","title":"Twisted unbounded element tree denial of service","severity":"high","exploited":false,"published_at":"2026-10-23T21:17:23.05+00:00","url":"https://junglewise.ai/threats/cve-2026-115775-twisted-unauthenticated-remote-denial-of-service-in-the-twisted"},{"cve":"CVE-2026-115774","cvss":4.9,"epss":0.0043,"slug":"cve-2026-115774-twisted-denial-of-service-in-the-twisted-imap4-server-via-a","title":"Twisted IMAP4 server denial of service via negative literal size","severity":"medium","exploited":false,"published_at":"2026-10-23T21:17:22.9+00:00","url":"https://junglewise.ai/threats/cve-2026-115774-twisted-denial-of-service-in-the-twisted-imap4-server-via-a"},{"cve":"CVE-2026-106454","cvss":4.3,"epss":0.0033,"slug":"cve-2026-106454-twisted-is-an-event-based-framework-for-internet-applications","title":"Twisted ReDoS in IMAP4 wildcard pattern parsing","severity":"medium","exploited":false,"published_at":"2026-10-06T20:17:27.597+00:00","url":"https://junglewise.ai/threats/cve-2026-106454-twisted-is-an-event-based-framework-for-internet-applications"},{"slug":"twisted-http-2-denial-of-service-via-ping-reset-and-settings-floods-bb140f9c","title":"Twisted HTTP/2 denial of service via ping, reset, and settings floods","severity":"info","exploited":false,"published_at":"2022-03-14T22:45:11+00:00","url":"https://junglewise.ai/threats/twisted-http-2-denial-of-service-via-ping-reset-and-settings-floods-bb140f9c"},{"cve":"CVE-2016-1000111","cvss":3.1,"epss":0.0276,"slug":"cve-2016-1000111-twisted-http-proxy-environment-variable-forced-browsing","title":"Twisted HTTP_PROXY environment variable forced browsing","severity":"low","exploited":false,"published_at":"2020-03-11T20:15:00+00:00","url":"https://junglewise.ai/threats/cve-2016-1000111-twisted-http-proxy-environment-variable-forced-browsing"},{"cve":"CVE-2014-7143","cvss":3.1,"epss":0.0261,"slug":"cve-2014-7143-twisted-trustroot-not-respected-in-http-client","title":"PYSEC-2019-212 - Python Twisted 14.0 trustRoot is not respected in HTTP client","severity":"low","exploited":false,"published_at":"2019-11-12T14:15:00+00:00","url":"https://junglewise.ai/threats/cve-2014-7143-twisted-trustroot-not-respected-in-http-client"}],"vendor":{"hub":true,"name":"Twisted","slug":"twisted","description":"Python framework for building networked applications and protocols.","url":"https://junglewise.ai/threats/vendors/twisted"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-115778","cvss":7.5,"epss":0.0074,"slug":"cve-2026-115778-twisted-unauthenticated-remote-denial-of-service-in-the-twisted","title":"Twisted conch telnet unbounded subnegotiation buffer denial of service","severity":"high","exploited":false,"published_at":"2026-10-23T21:17:23.32+00:00","url":"https://junglewise.ai/threats/cve-2026-115778-twisted-unauthenticated-remote-denial-of-service-in-the-twisted"},{"cve":"CVE-2026-115776","cvss":7.5,"epss":0.0074,"slug":"cve-2026-115776-twisted-unauthenticated-remote-denial-of-service-in-the-twisted","title":"Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.","severity":"high","exploited":false,"published_at":"2026-10-23T21:17:23.18+00:00","url":"https://junglewise.ai/threats/cve-2026-115776-twisted-unauthenticated-remote-denial-of-service-in-the-twisted"},{"cvss":7.5,"slug":"twisted-unauthenticated-remote-denial-of-service-in-the-twisted-http-2-0f2d7a0e","title":"Twisted HTTP/2 server denial of service via rapid stream reset","severity":"high","exploited":false,"published_at":"2026-10-29T16:41:06+00:00","url":"https://junglewise.ai/threats/twisted-unauthenticated-remote-denial-of-service-in-the-twisted-http-2-0f2d7a0e"},{"cve":"CVE-2026-115775","cvss":4,"epss":0.0044,"slug":"cve-2026-115775-twisted-unauthenticated-remote-denial-of-service-in-the-twisted","title":"Twisted unbounded element tree denial of service","severity":"high","exploited":false,"published_at":"2026-10-23T21:17:23.05+00:00","url":"https://junglewise.ai/threats/cve-2026-115775-twisted-unauthenticated-remote-denial-of-service-in-the-twisted"},{"cve":"CVE-2026-115877","cvss":5.4,"epss":0.0033,"slug":"cve-2026-115877-twisted-http-request-smuggling-in-twisted-web-via-a-bare-cr-or","title":"Twisted HTTP request smuggling via bare CR or LF in header","severity":"medium","exploited":false,"published_at":"2026-10-23T21:17:23.643+00:00","url":"https://junglewise.ai/threats/cve-2026-115877-twisted-http-request-smuggling-in-twisted-web-via-a-bare-cr-or"},{"cve":"CVE-2026-115774","cvss":4.9,"epss":0.0043,"slug":"cve-2026-115774-twisted-denial-of-service-in-the-twisted-imap4-server-via-a","title":"Twisted IMAP4 server denial of service via negative literal size","severity":"medium","exploited":false,"published_at":"2026-10-23T21:17:22.9+00:00","url":"https://junglewise.ai/threats/cve-2026-115774-twisted-denial-of-service-in-the-twisted-imap4-server-via-a"},{"cve":"CVE-2026-106454","cvss":4.3,"epss":0.0033,"slug":"cve-2026-106454-twisted-is-an-event-based-framework-for-internet-applications","title":"Twisted ReDoS in IMAP4 wildcard pattern parsing","severity":"medium","exploited":false,"published_at":"2026-10-06T20:17:27.597+00:00","url":"https://junglewise.ai/threats/cve-2026-106454-twisted-is-an-event-based-framework-for-internet-applications"},{"cve":"CVE-2016-1000111","cvss":3.1,"epss":0.0276,"slug":"cve-2016-1000111-twisted-http-proxy-environment-variable-forced-browsing","title":"Twisted HTTP_PROXY environment variable forced browsing","severity":"low","exploited":false,"published_at":"2020-03-11T20:15:00+00:00","url":"https://junglewise.ai/threats/cve-2016-1000111-twisted-http-proxy-environment-variable-forced-browsing"},{"cve":"CVE-2014-7143","cvss":3.1,"epss":0.0261,"slug":"cve-2014-7143-twisted-trustroot-not-respected-in-http-client","title":"PYSEC-2019-212 - Python Twisted 14.0 trustRoot is not respected in HTTP client","severity":"low","exploited":false,"published_at":"2019-11-12T14:15:00+00:00","url":"https://junglewise.ai/threats/cve-2014-7143-twisted-trustroot-not-respected-in-http-client"},{"slug":"twisted-http-2-denial-of-service-via-ping-reset-and-settings-floods-bb140f9c","title":"Twisted HTTP/2 denial of service via ping, reset, and settings floods","severity":"info","exploited":false,"published_at":"2022-03-14T22:45:11+00:00","url":"https://junglewise.ai/threats/twisted-http-2-denial-of-service-via-ping-reset-and-settings-floods-bb140f9c"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Twisted","slug":"twisted-twisted","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/twisted-twisted"}]}