Vendor
An unauthenticated attacker can trigger a process-wide memory exhaustion denial-of-service in Twisted versions prior to 26.10.0rc1 by sending a specially crafted, unterminated Telnet subnegotiation sequence.