PyPI/twisted CVE-2014-7143: unknown, EPSS 2.61%

Python Twisted 14.0 trustRoot is not respected in HTTP client

Action: Upgrade twisted to 14.0.1 or later.

pip install twisted==14.0.1

Affected

Fixed versions

Sources

• osv: PYSEC-2019-212
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-7143
• http://www.openwall.com/lists/oss-security/2014/09/22/2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96135
• https://security-tracker.debian.org/tracker/CVE-2014-7143
• https://github.com/advisories/GHSA-3c45-wgjp-7v9r

CVE-2014-7143 · published 2019-11-12T14:15:00Z · modified 2023-11-08T03:57:44.251593Z · JSON