PyPI/twisted CVE-2026-115776: high 7.5

Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer

Action: Upgrade twisted to 26.10.0rc1 or later.

pip install twisted==26.10.0rc1

Affected

Fixed versions

Sources

• osv: GHSA-53xc-49m8-p798
• https://github.com/twisted/twisted/security/advisories/GHSA-53xc-49m8-p798
• https://github.com/twisted/twisted/pull/12771
• https://github.com/twisted/twisted/commit/01f8cff7753c1edac132380b2ea939fa6bdbab30
• https://github.com/twisted/twisted/commit/ac90fb7b0ab73688a581fcd9a7c0577ec8ca3059
• https://github.com/twisted/twisted
• https://github.com/twisted/twisted/releases/tag/twisted-26.10.0rc1

CVE-2026-115776 · published 2026-10-23T20:45:35Z · modified 2026-10-23T21:00:06.139894246Z · JSON