{"id":"ghsa-ghsa-53xc-49m8-p798","seq":661341,"kind":"advisory","title":"Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer","url":"https://github.com/advisories/GHSA-53xc-49m8-p798","permalink":"https://vulnpulse.app/items/ghsa-ghsa-53xc-49m8-p798","summary":"影響: pip:Twisted <= 26.4.0 → 26.10.0rc1\nAn unbounded-buffer vulnerability (CWE-770) in the Twisted words IRC server lets any unauthenticated remote client exhaust server memory. twisted.words.protocols.irc.IRC.dataReceived appends every received byte to a per-connection buffer and only removes data at a line feed, with no maximum length. Because IRC is a plain Protocol and not a LineReceiver, one connection that streams bytes without a line feed grows the buffer without bound and drives the whole single-threaded process to out-of-mem…","severity":"high","techs":["python"],"cves":["CVE-2026-115776"],"tags":["GHSA-53xc-49m8-p798","Twisted"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-23T20:45:35.000Z","fetched_at":"2026-10-24T04:50:51.468Z"}