Product by Debian
Python-tornado
8 known vulnerabilities in Python-tornado (Debian), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-52804 | Tornado has HTTP cookie parsing DoS vulnerability | 7.5 | |
| High | CVE-2026-31958 | Tornado has a DoS due to too many multipart parts | 7.5 | |
| High | CVE-2025-47287 | Tornado vulnerable to excessive logging caused by malformed multipart form data | 7.5 | |
| Medium | CVE-2023-28370 | Tornado: Open Redirect | 6.1 | |
| High | CVE-2025-67725 | Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing | 7.5 | |
| High | CVE-2025-67726 | Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters | 7.5 | |
| High | CVE-2026-35536 | Tornado: Improper Handling of Invalid Use of Special Elements | 7.2 | |
| Medium | CVE-2025-67724 | Tornado vulnerable to Header Injection and XSS via reason argument | 5.4 |