CVE-2026-42304
2 advisories.
PyPI/twisted CVE-2026-42304: high 7.5
Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains
Action: Upgrade twisted to 26.4.0rc2 or later.
pip install twisted==26.4.0rc2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.4.0rc2 | - |
Fixed versions
| 26.4.0rc2 |
Sources
- osv: GHSA-grgv-6hw6-v9g4
- https://github.com/twisted/twisted/security/advisories/GHSA-grgv-6hw6-v9g4
- https://nvd.nist.gov/vuln/detail/CVE-2026-42304
- https://github.com/twisted/twisted/commit/e11cd82bdd79b3ebbb0e8635cbb9c76df2b5af09
- https://github.com/pypa/advisory-database/tree/main/vulns/twisted/PYSEC-2026-160.yaml
- https://github.com/twisted/twisted
CVE-2026-42304 · published · modified · JSON
PyPI/twisted CVE-2026-42304: high 7.5
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of Service (DoS) attack via resource exhau
Action: Upgrade twisted to 26.4.0 or later.
pip install twisted==26.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.4.0 | - |
Fixed versions
| 26.4.0 |
Sources
CVE-2026-42304 · published · modified · JSON