PyPI/twisted CVE-2026-42304: high 7.5, EPSS 0.43%
Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains
Action: Upgrade twisted to 26.4.0rc2 or later.
pip install twisted==26.4.0rc2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.4.0rc2 | - |
Fixed versions
| 26.4.0rc2 |
Sources
- osv: GHSA-grgv-6hw6-v9g4
- https://github.com/twisted/twisted/security/advisories/GHSA-grgv-6hw6-v9g4
- https://nvd.nist.gov/vuln/detail/CVE-2026-42304
- https://github.com/twisted/twisted/commit/e11cd82bdd79b3ebbb0e8635cbb9c76df2b5af09
- https://github.com/pypa/advisory-database/tree/main/vulns/twisted/PYSEC-2026-160.yaml
- https://github.com/twisted/twisted
CVE-2026-42304 · published · modified · JSON