Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
PyPI twisted · Upgrade to 26.10.0rc1 (pre-release) or later · <= 26.4.0 · CVE-2026-115775 · GHSA-3476-c5c2-fr73 · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
PyPI twisted · Upgrade to 26.10.0rc1 (pre-release) or later · <= 26.4.0 · CVE-2026-115775 · GHSA-3476-c5c2-fr73 · amended
npm obsidian-tc · Upgrade to 1.31.4 or later · >= 1.0.1, <= 1.31.3 · CVE-2026-115478 · GHSA-r3g7-r4hr-m258 · amended
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260731131820-67bc300b6ea6 (pre-release) or later · < 0.0.0-20260731131820-67bc300b6ea6 · CVE-2026-73054 · GHSA-c8w8-3pqp-wr83 · amended
npm obsidian-tc · Upgrade to 1.3.1 or later · < 1.3.1 · CVE-2026-77363 · GHSA-pqh8-4pj7-32xx · amended
npm obsidian-tc · Upgrade to 1.31.4 or later · >= 1.13.0, <= 1.31.3 · CVE-2026-115477 · GHSA-737x-cwfr-5vvc · amended
npm obsidian-tc · Upgrade to 1.3.1 or later · < 1.3.1 · CVE-2026-77366 · GHSA-84c9-qqpq-2pq5 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.