Threats Tagged 'oesa-2026-4428'

In Twisted versions 25.5.0 and earlier, the wildcardToRegexp() function in twisted/mail/imap4.py improperly handles certain IMAP pattern characters by passing them directly to Python's regular expression compiler. This allows an authenticated client to craft patterns that cause catastrophic backtracking, leading to a denial of service by suspending all server input and output during the match. No fixed release is currently available.