tornado vulnerabilities

Tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed.

6.5.2

15 years ago

29 days ago

Known vulnerabilities in the tornado package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Allocation of Resources Without Limits or Throttling	[,6.5)
M Regular Expression Denial of Service (ReDoS)	[,6.4.2)
M HTTP Request Smuggling	[,6.4.1)
M Improper Neutralization of CRLF Sequences ('CRLF Injection')	[,6.4.1)
M HTTP Request Smuggling	[,6.3.3)
M Relative Path Traversal	[3.1,4.2.1)
M HTTP Request Smuggling	[,6.3.3)
L Open Redirect	[,6.3.2)
H Denial of Service (DoS)	[,5.1)
M HTTP Response Splitting	[,2.2.1)
H Cross-site Request Forgery (CSRF)	[,3.2.2)
M Denial of Service (DoS)	[,3.2)

78 VERSIONS IN TOTAL