The twisted.web HTTP server versions prior to 24.7.0rc1 have a vulnerability where HTTP/1.0 and 1.1 pipelined requests can be processed out-of-order. This flaw can lead to information disclosure, especially when twisted.web servers are behind reverse proxies with connection pooling, potentially exposing responses to unintended clients. The issue is tracked as CVE-2024-41671 and has a high severity rating with a CVSS score of 8.3.