Threats tagged 'brew-magic-wormhole-cve-2026-115775'

An unauthenticated remote denial of service vulnerability exists in the Twisted words domish XML element stream. An attacker can open an XML stream and send a container element without closing it, continuously streaming child elements. Each child element is retained in memory because the container is never closed, causing unbounded memory growth. This leads to memory exhaustion and potential server process termination. The vulnerability affects Twisted version 26.4.0 and occurs before authentication in protocols like XMPP. There is no impact on confidentiality, integrity, or code execution.