| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-91992 | vulnerable | vulnerable | vulnerable | vulnerable | Tornado before 6.5.7 contains a credential leak vulnerability in CurlA ... |
| CVE-2026-91991 | vulnerable | fixed | vulnerable | vulnerable | Tornado before 6.5.8 contains an incomplete fix for cookie attribute i ... |
| CVE-2026-91990 | vulnerable | vulnerable | vulnerable | vulnerable | Tornado before 6.5.8 contains a memory amplification vulnerability in ... |
| CVE-2026-82397 | vulnerable | vulnerable | vulnerable | vulnerable | Tornado is a Python web framework and asynchronous networking library. ... |
| CVE-2026-49855 | vulnerable | vulnerable (no DSA) | vulnerable | vulnerable | Tornado is a Python web framework and asynchronous networking library. ... |
| CVE-2026-49854 | vulnerable | vulnerable (no DSA) | vulnerable | vulnerable | Tornado is a Python web framework and asynchronous networking library. ... |
| CVE-2026-49853 | vulnerable | vulnerable (no DSA) | vulnerable | vulnerable | Tornado is a Python web framework and asynchronous networking library. ... |
| CVE-2026-35536 | vulnerable | vulnerable (no DSA) | fixed | fixed | In Tornado before 6.5.5, cookie attribute injection could occur becaus ... |
| CVE-2026-31958 | vulnerable | vulnerable (no DSA) | fixed | fixed | Tornado is a Python web framework and asynchronous networking library. ... |
| CVE-2024-58384 | vulnerable | fixed | fixed | fixed | Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAs ... |
| CVE-2024-14029 | vulnerable | fixed | fixed | fixed | Tornado before 6.4.1 ignores duplicate Transfer-Encoding: chunked head ... |
| CVE-2023-54397 | vulnerable | fixed | fixed | fixed | Tornado before 6.3.3 contains an HTTP request smuggling vulnerability ... |
| Bug | Description |
|---|
| CVE-2025-67726 | Tornado is a Python web framework and asynchronous networking library. ... |
| CVE-2025-67725 | Tornado is a Python web framework and asynchronous networking library. ... |
| CVE-2025-67724 | Tornado is a Python web framework and asynchronous networking library. ... |
| CVE-2025-47287 | Tornado is a Python web framework and asynchronous networking library. ... |
| CVE-2024-52804 | Tornado is a Python web framework and asynchronous networking library. ... |
| CVE-2023-28370 | Open redirect vulnerability in Tornado versions 6.3.1 and earlier allo ... |
| CVE-2014-9720 | Tornado before 3.2.2 sends arbitrary responses that contain a fixed CS ... |
| CVE-2013-2099 | Algorithmic complexity vulnerability in the ssl.match_hostname functio ... |
| CVE-2012-2374 | CRLF injection vulnerability in the tornado.web.RequestHandler.set_hea ... |