{"action":"Upgrade twisted to 26.10.0rc1 or later.","affected":[{"fixed":"26.10.0rc1","introduced":"0"}],"component":"twisted","cve_ids":["CVE-2026-115774"],"ecosystem":"PyPI","epss":0.0043,"exploited":false,"fixed_versions":["26.10.0rc1"],"ghsa_id":"GHSA-2qrf-pqgx-qh9v","id":"tcs_01M5NASS8SWHECW2PGY1CGDQP5","modified_at":"2026-10-23T21:00:04.322993195Z","published_at":"2026-10-23T20:46:12Z","references":["https://osv.dev/vulnerability/GHSA-2qrf-pqgx-qh9v","https://github.com/twisted/twisted/security/advisories/GHSA-2qrf-pqgx-qh9v","https://github.com/twisted/twisted/pull/12764","https://github.com/twisted/twisted/commit/3d125548bcbe955007cb97f480bb699a5e074741","https://github.com/twisted/twisted","https://github.com/twisted/twisted/releases/tag/twisted-26.10.0rc1"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-2qrf-pqgx-qh9v","url":"https://osv.dev/vulnerability/GHSA-2qrf-pqgx-qh9v"}],"summary":"Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH"}