Product by Ubuntu
Python-tornado
6 known vulnerabilities in Python-tornado (Ubuntu), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-103262 | Tornado before 6.5.9 Denial of Service via CurlAsyncHTTPClient | 7.5 | |
| High | CVE-2026-103263 | Tornado before 6.5.9 StaticFileHandler Path Traversal via Symlink | 5.9 | |
| High | CVE-2026-91990 | Tornado before 6.5.8 Memory Amplification DoS via multipart | 7.5 | |
| Critical | CVE-2023-54397 | Tornado before 6.3.3 HTTP Request Smuggling via Content-Length | 7.5 | |
| Critical | CVE-2024-14029 | Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding | 7.5 | |
| High | CVE-2026-91992 | Tornado before 6.5.7 Credential Leak via Handle Reuse | 5.9 |