VIR Vulnerability Intelligence Relay

Package impact

python PyPI / tornado

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2025-47287 high — 8.0 1y ago Important: pcs security update redhatrockylinuxsusedebian+1
CVE-2024-52804 high — 8.0 2y ago Important: python-tornado security update redhatrockylinuxsusedebian+1
CVE-2026-31958 medium — 5.5 23d ago Moderate: python-tornado security update redhatsusedebianpython
CVE-2026-35536 medium — 5.5 23d ago Moderate: python-tornado security update redhatsusedebianpython
CVE-2023-28370 medium — 5.5 3y ago Moderate: python-tornado security update redhatsusedebianpython
CVE-2012-2374 medium — 5.0 14y ago CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting… debianpython
CVE-2014-9720 unknown — — 4y ago Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determi… debianpython