CVE-2026-115778
1 advisory.
PyPI/twisted CVE-2026-115778: high 7.5
Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
Action: Upgrade twisted to 26.10.0rc1 or later.
pip install twisted==26.10.0rc1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.10.0rc1 | - |
Fixed versions
| 26.10.0rc1 |
Sources
- osv: GHSA-cwm5-jh59-mwxr
- https://github.com/twisted/twisted/security/advisories/GHSA-cwm5-jh59-mwxr
- https://github.com/twisted/twisted/pull/12750
- https://github.com/twisted/twisted/commit/073ba878c6c07d569cb61abc5ae76d46eff1b529
- https://github.com/twisted/twisted/commit/5d91cc66a3591faba758a80a1479e0103602facc
- https://github.com/twisted/twisted
- https://github.com/twisted/twisted/releases/tag/twisted-26.10.0rc1
CVE-2026-115778 · published · modified · JSON