{"action":"Upgrade twisted to 24.7.0rc1 or later.","affected":[{"fixed":"24.7.0rc1","introduced":"0"}],"component":"twisted","cve_ids":["CVE-2024-41671"],"ecosystem":"PyPI","epss":0.00863,"exploited":false,"fixed_versions":["24.7.0rc1"],"ghsa_id":"GHSA-c8m8-j448-xjx7","id":"tcs_01M5KFCHE74YXGJ7KKQVXHG63P","modified_at":"2026-07-07T17:56:49.021057189Z","published_at":"2024-07-29T16:33:11Z","references":["https://osv.dev/vulnerability/GHSA-c8m8-j448-xjx7","https://github.com/twisted/twisted/security/advisories/GHSA-c8m8-j448-xjx7","https://nvd.nist.gov/vuln/detail/CVE-2024-41671","https://github.com/twisted/twisted/commit/046a164f89a0f08d3239ecebd750360f8914df33","https://github.com/twisted/twisted/commit/4a930de12fb67e88fefcb8822104152f42b27abc","https://github.com/twisted/twisted","https://lists.debian.org/debian-lts-announce/2024/11/msg00028.html","https://www.vicarius.io/vsociety/posts/disordered-http-pipeline-in-twistedweb-cve-2024-4167"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-c8m8-j448-xjx7","url":"https://osv.dev/vulnerability/GHSA-c8m8-j448-xjx7"}],"summary":"twisted.web has disordered HTTP pipeline response"}