pkg:PyPI/tornado

所有已知漏洞

• HIGH7.5CVE-2026-31958Tornado is vulnerable to DoS due to too many multipart parts
  from 0, < 6.5.5
• HIGH7.5CVE-2026-31958Tornado is vulnerable to DoS due to too many multipart parts
  from 0, < 6.5.5
• HIGH7.5CVE-2025-47287Tornado vulnerable to excessive logging caused by malformed multipart form data
  from 0, < 6.5
• HIGH7.5CVE-2024-52804Tornado has an HTTP cookie parsing DoS vulnerability
  from 0, < 6.4.2
• HIGH7.5CVE-2012-2374Tornado CRLF injection vulnerability
  from 0, < 2.2.1
• HIGH7.5CVE-2012-2374Tornado CRLF injection vulnerability
  from 0, < 2.2.1
• HIGH7.2CVE-2026-35536Tornado has cookie attribute injection via .RequestHandler.set_cookie
  from 0, < 6.5.5
• MEDIUM6.5CVE-2014-9720Tornado XSRF cookie allows side-channel attack against TLS (BREACH attack)
  from 0, < 3.2.2
• MEDIUM6.5CVE-2014-9720Tornado XSRF cookie allows side-channel attack against TLS (BREACH attack)
  from 0, < 1c36307463b1e8affae100bf9386948e6c1b2308 | from 0, < 3.2.2
• MEDIUM6.1CVE-2023-28370Open redirect in Tornado
  from 0, < 6.3.2
• MEDIUM6.1CVE-2023-28370Open redirect in Tornado
  from 0, < 6.3.2