{"action":"Upgrade twisted to 22.2.0 or later.","affected":[{"fixed":"22.2.0","introduced":"21.7.0"}],"component":"twisted","cve_ids":["CVE-2022-21716"],"ecosystem":"PyPI","epss":0.0351,"exploited":false,"fixed_versions":["22.2.0"],"ghsa_id":"GHSA-rv6r-3f5q-9rgx","id":"tcs_01M5KGG88VY002XV55J4MNHA49","modified_at":"2023-11-08T04:08:09.232676Z","published_at":"2022-03-03T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-160","https://github.com/twisted/twisted/commit/89c395ee794e85a9657b112c4351417850330ef9","https://github.com/twisted/twisted/security/advisories/GHSA-rv6r-3f5q-9rgx","https://twistedmatrix.com/trac/ticket/10284","https://github.com/twisted/twisted/releases/tag/twisted-22.2.0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-160","url":"https://osv.dev/vulnerability/PYSEC-2022-160"}],"summary":"Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is able to accept an infinite amount of data for the pee"}