How many CVEs have a located fix in twisted/twisted?

13 published CVEs have a fix traced to functions in twisted/twisted, touching 54 functions across 20 files.

Which function in twisted/twisted has been patched by the most CVEs?

headerReceived in src/twisted/web/http.py has been changed by 3 CVE fixes, from 2020 to 2022.

How large is a typical CVE fix in twisted/twisted?

The median fix changes 56 lines. 31% of fixes change 20 lines or fewer, and 38% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

python

#457 of 500 repositories

twisted/twisted

Name: twisted/twisted: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix October 6, 2026

13

CVE fixes located

Published CVEs

54

Functions patched

Distinct function sites

20

Files patched

Distinct source files

2019–2026

Years covered

By CVE publication date

Overview

13 published CVEs have a fix traced to functions in twisted/twisted, the earliest published in 2019. Those fixes changed 54 distinct functions across 20 files, in 115 patch hunks.

Among the 500 repositories tracked here, twisted/twisted ranks #457 by the number of CVEs with a located fix.

Most patched functions

Functions in twisted/twisted changed by the most CVE fixes.

Most patched files

Files in twisted/twisted changed by the most CVE fixes.

1src/twisted/web/http.py4 CVEs · 9 functions
2src/twisted/web/_template_util.py3 CVEs · 2 functions
3src/twisted/web/client.py2 CVEs · 10 functions
4src/twisted/web/script.py1 CVEs · 4 functions
5src/twisted/web/_auth/wrapper.py1 CVEs · 3 functions
6src/twisted/web/_newclient.py1 CVEs · 3 functions
7src/twisted/web/resource.py1 CVEs · 3 functions
8src/twisted/words/protocols/jabber/client.py1 CVEs · 3 functions
9src/twisted/web/distrib.py1 CVEs · 2 functions
10src/twisted/web/server.py1 CVEs · 2 functions

Fix size

How much code a CVE fix in twisted/twisted changes, with backports counted once.

56

Median lines changed

Added plus removed, per CVE

31%

Fixes of 20 lines or fewer

Share of CVE fixes

38%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in twisted/twisted, and the functions each fix changed.

Twisted: IMAP wildcardToRegexp() ReDoS
CVE-2026-106454wildcardToRegexp
Medium · CVSS 4.3
EPSS 0.3%2026-10-06
Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains
CVE-2026-42304decode
High · CVSS 7.5
EPSS 0.9%2026-05-13
HTML injection in HTTP redirect body
CVE-2024-41810render_GET
Medium · CVSS 5.3
EPSS 1.2%2024-07-29
twisted.web has disordered HTTP pipeline response
CVE-2024-41671_dataReceived_TRAILER _finishRequestBody render_GET
Medium · CVSS 6.9
EPSS 0.9%2024-07-29
Twisted vulnerable to NameVirtualHost Host header injection
CVE-2022-39348_ErrorPage NoResource ErrorPage
Medium · CVSS 5.1
EPSS 1.3%2022-10-26
Inconsistent Interpretation of HTTP Requests in twisted.web
CVE-2022-24801noMoreData fromChunk _dataReceived_CHUNK_LENGTH
Critical · CVSS 9.2
EPSS 2.8%2022-04-04
Buffer Overflow in Twisted
CVE-2022-21716dataReceived
High · CVSS 8.7
EPSS 3.5%2022-03-03
Cookie and header exposure in twisted
CVE-2022-21712_handleRedirect _handleResponse IAgent
High · CVSS 8.7
EPSS 1.4%2022-02-07
Improper Input Validation in Twisted
CVE-2020-10108_maybeChooseTransferDecoder headerReceived
Critical · CVSS 9.3
EPSS 4.0%2020-03-12
HTTP Request Smuggling in Twisted
CVE-2020-10109_maybeChooseTransferDecoder headerReceived
Critical · CVSS 9.3
EPSS 3.3%2020-03-12
Python Twisted trustRoot is not respected in HTTP client
CVE-2014-7143creatorForNetloc
High · CVSS 8.7
EPSS 2.6%2019-11-12
Improper Certificate Validation in Twisted
CVE-2019-12855__init__associateWithStream XMPPClientFactory
Critical · CVSS 9.1
EPSS 1.8%2019-06-16

Get an alert for each new twisted/twisted CVE, with the patched functions and AI-written analysis.

Monitor twisted CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

apache/kylin13 CVEs apache/superset13 CVEs bagisto/bagisto13 CVEs better-auth/better-auth13 CVEs caddyserver/caddy13 CVEs cerebrate-project/cerebrate13 CVEs CoreWCF/CoreWCF13 CVEs craftcms/commerce13 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in twisted/twisted.

How many CVEs have a located fix in twisted/twisted?: 13 published CVEs have a fix traced to functions in twisted/twisted, touching 54 functions across 20 files.
Which function in twisted/twisted has been patched by the most CVEs?: headerReceived in src/twisted/web/http.py has been changed by 3 CVE fixes, from 2020 to 2022.
How large is a typical CVE fix in twisted/twisted?: The median fix changes 56 lines. 31% of fixes change 20 lines or fewer, and 38% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track twisted/twisted CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing