{"id":"ghsa-ghsa-2qrf-pqgx-qh9v","seq":661340,"kind":"advisory","title":"Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH","url":"https://github.com/advisories/GHSA-2qrf-pqgx-qh9v","permalink":"https://vulnpulse.app/items/ghsa-ghsa-2qrf-pqgx-qh9v","summary":"影響: pip:Twisted <= 26.4.0 → 26.10.0rc1\nAn infinite-loop vulnerability (CWE-835) in the Twisted IMAP4 server lets an authenticated client freeze the whole process with one small command. twisted.mail.imap4.parseNestedParens reads an IMAP literal size with int() and never rejects a negative value. A negative size such as {-100} drives the parser cursor negative, and because a negative Python index wraps around the end of the string instead of raising, the scanning loop never terminates. It runs synchronously on the single-threaded rea…","severity":"medium","techs":["python"],"cves":["CVE-2026-115774"],"tags":["GHSA-2qrf-pqgx-qh9v","Twisted"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-23T20:46:12.000Z","fetched_at":"2026-10-24T04:50:51.468Z"}