https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T17:05:27.409523+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-21712 CVE-2022-21712 — Cookie and header exposure in twisted 2026-10-06T17:05:28.597710+00:00

Affected: twisted

twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the `twited.web.RedirectAgent` and `twisted.web. BrowserLikeRedirectAgent` functions. Users are advised to upgrade. There are no known workarounds.

 https://vulnerability.circl.lu/vuln/ghsa-92x2-jw7w-xvvx GHSA-92x2-jw7w-xvvx — Cookie and header exposure in twisted 2026-10-06T17:05:28.597815+00:00

Affected: PyPI: Twisted

### Impact

Cookie and Authorization headers are leaked when following cross-origin redirects in `twited.web.client.RedirectAgent` and `twisted.web.client.BrowserLikeRedirectAgent`.

 https://vulnerability.circl.lu/vuln/pysec-2022-27 PYSEC-2022-27 2026-10-06T17:05:28.597862+00:00

Affected: PyPI: twisted

twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the `twited.web.RedirectAgent` and `twisted.web. BrowserLikeRedirectAgent` functions. Users are advised to upgrade. There are no known workarounds.