glyph-lefkowitz

Top products

The 11 most recently published vulnerabilities affecting glyph-lefkowitz.

• CVE-2024-41810HTML injection in HTTP redirect body6.1Jul 29, 2024
• CVE-2024-41671twisted.web has disordered HTTP pipeline response8.3Jul 29, 2024
• CVE-2023-46137twisted.web has disordered HTTP pipeline response5.3Oct 25, 2023
• CVE-2022-39348Twisted vulnerable to NameVirtualHost Host header injection5.4Oct 26, 2022
• CVE-2022-24801HTTP Request Smuggling in twisted.web8.1Apr 4, 2022
• CVE-2022-21716Buffer Overflow in Twisted7.5Mar 3, 2022
• CVE-2022-21712Cookie and header exposure in twisted7.5Feb 7, 2022
• CVE-2020-10108In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value ...9.8Mar 12, 2020
• CVE-2020-10109In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the rem...9.8Mar 12, 2020
• CVE-2019-12855In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.7.4Jun 16, 2019
• CVE-2019-12387In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.6.1Jun 10, 2019