{"action":"Upgrade twisted to 24.7.0rc1 or later.","affected":[{"fixed":"24.7.0rc1","introduced":"0"}],"component":"twisted","cve_ids":["CVE-2024-41671"],"ecosystem":"PyPI","epss":0.00863,"exploited":false,"fixed_versions":["24.7.0rc1"],"ghsa_id":"GHSA-c8m8-j448-xjx7","id":"tcs_01M5KGWW41ED1797C5FPBZ9MPG","modified_at":"2026-07-07T17:48:14.974012795Z","published_at":"2026-07-07T14:34:37.734958Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1992","https://github.com/twisted/twisted/security/advisories/GHSA-c8m8-j448-xjx7","https://nvd.nist.gov/vuln/detail/CVE-2024-41671","https://github.com/twisted/twisted/commit/046a164f89a0f08d3239ecebd750360f8914df33","https://github.com/twisted/twisted/commit/4a930de12fb67e88fefcb8822104152f42b27abc","https://github.com/twisted/twisted","https://lists.debian.org/debian-lts-announce/2024/11/msg00028.html","https://www.vicarius.io/vsociety/posts/disordered-http-pipeline-in-twistedweb-cve-2024-4167","https://pypi.org/project/twisted","https://github.com/advisories/GHSA-c8m8-j448-xjx7"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-1992","url":"https://osv.dev/vulnerability/PYSEC-2026-1992"}],"summary":"twisted.web has disordered HTTP pipeline response"}