Python Twisted trustRoot is not respected in HTTP client

Description

References

• nvd.nist.gov/vuln/detail/CVE-2014-7143 · ADVISORY
• twisted/twisted commit 3b59422 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/96135 · WEB
• pypa/advisory-database · WEB
• twisted/twisted · PACKAGE
• security-tracker.debian.org/tracker/CVE-2014-7143 · WEB
• openwall.com/lists/oss-security/2014/09/22/2 · WEB
• GitHub Advisory GHSA-3c45-wgjp-7v9r · ADVISORY

twisted 的其他漏洞

• GHSA-vpp8-g58w-m8mp高危 7.5Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset
• CVE-2026-83813低危 3.1Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramPro…
• CVE-2026-115877中危 5.4Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.web.http.HTTPChannel.hea…
• CVE-2026-115778高危 7.5Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.conch.telnet.Telnet.data…
• CVE-2026-115776高危 7.5Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.…