{"id":"ALPINE-CVE-2024-41671","details":"Twisted is an event-based framework for internet applications, supporting Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure. This vulnerability is fixed in 24.7.0rc1.","modified":"2026-11-03T06:32:59.838082032Z","published":"2024-07-29T15:15:15.760Z","upstream":["CVE-2024-41671"],"references":[{"type":"ADVISORY","url":"https://security.alpinelinux.org/vuln/CVE-2024-41671"}],"affected":[{"package":{"name":"synapse","ecosystem":"Alpine:v3.20","purl":"pkg:apk/alpine/synapse?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.112.0-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2024-41671.json"}},{"package":{"name":"synapse","ecosystem":"Alpine:v3.21","purl":"pkg:apk/alpine/synapse?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.112.0-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2024-41671.json"}},{"package":{"name":"synapse","ecosystem":"Alpine:v3.22","purl":"pkg:apk/alpine/synapse?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.112.0-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2024-41671.json"}},{"package":{"name":"synapse","ecosystem":"Alpine:v3.23","purl":"pkg:apk/alpine/synapse?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.112.0-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2024-41671.json"}},{"package":{"name":"synapse","ecosystem":"Alpine:v3.24","purl":"pkg:apk/alpine/synapse?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.112.0-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2024-41671.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L"}]}