https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T14:17:55.101823+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-21716 CVE-2022-21716 — Buffer Overflow in Twisted 2026-10-07T14:17:55.410044+00:00

Affected: twisted

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is able to accept an infinite amount of data for the peer's SSH version identifier. This ends up with a buffer using all the available memory. The attach is a simple as `nc -rv localhost 22 < /dev/zero`. A patch is available in version 22.2.0. There are currently no known workarounds.

 https://vulnerability.circl.lu/vuln/usn-5354-1 USN-5354-1 — twisted vulnerabilities 2026-10-07T14:17:55.410166+00:00

Affected: Ubuntu:18.04:LTS: twisted, Ubuntu:20.04:LTS: twisted

It was discovered that Twisted incorrectly filtered HTTP headers when clients are being redirected to another origin. A remote attacker could use this issue to obtain sensitive information. (CVE-2022-21712)

It was discovered that Twisted incorrectly processed SSH handshake data on connection establishments. A remote attacker could use this issue to cause Twisted to crash, resulting in a denial of service. (CVE-2022-21716)