Known vulnerabilities in python-tornado (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:python-tornado_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python-tornado (Ubuntu package) python-tornado (Ubuntu package) is affected by 8 known vulnerabilities: 6 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128148 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-35536
CWE-74 Medium
No
No
4.2.1-1ubuntu3.1+esm3, 4.5.3-1ubuntu0.2+esm3, 6.0.3+really5.1.1-3ubuntu0.1~esm5, 6.1.0-3ubuntu0.1~esm5, 6.4.0-1ubuntu0.5, 6.4.2-3ubuntu0.3, 6.5.4-0.1ubuntu0.1 27.04.2026 SB20260427102
SB20260427118
SB20260427149
and 10 more
#VU128147 - Resource exhaustion
CVE-2026-31958
CWE-400 Medium
No
No
4.2.1-1ubuntu3.1+esm3, 4.5.3-1ubuntu0.2+esm3, 6.0.3+really5.1.1-3ubuntu0.1~esm5, 6.1.0-3ubuntu0.1~esm5, 6.4.0-1ubuntu0.5, 6.4.2-3ubuntu0.3, 6.5.4-0.1ubuntu0.1 27.04.2026 SB20260427102
SB20260427109
SB20260427110
and 40 more
#VU119885 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-67724
CWE-644 Low
No
No
4.2.1-1ubuntu3.1+esm2, 4.5.3-1ubuntu0.2+esm2, 6.0.3+really5.1.1-3ubuntu0.1~esm3, 6.1.0-3ubuntu0.1~esm4, 6.4.0-1ubuntu0.4, 6.4.2-1ubuntu0.25.04.3, 6.4.2-3ubuntu0.2 12.12.2025 SB2025121205
SB2026010587
SB2026010938
and 35 more
#VU119884 - Excessive Iteration
CVE-2025-67725
CWE-834 Low
No
No
4.2.1-1ubuntu3.1+esm2, 4.5.3-1ubuntu0.2+esm2, 6.0.3+really5.1.1-3ubuntu0.1~esm3, 6.1.0-3ubuntu0.1~esm4, 6.4.0-1ubuntu0.4, 6.4.2-1ubuntu0.25.04.3, 6.4.2-3ubuntu0.2 12.12.2025 SB2025121205
SB2026010587
SB2026010938
and 41 more
#VU119883 - Excessive Iteration
CVE-2025-67726
CWE-834 Medium
No
No
4.2.1-1ubuntu3.1+esm2, 4.5.3-1ubuntu0.2+esm2, 6.0.3+really5.1.1-3ubuntu0.1~esm3, 6.1.0-3ubuntu0.1~esm4, 6.4.0-1ubuntu0.4, 6.4.2-1ubuntu0.25.04.3, 6.4.2-3ubuntu0.2 12.12.2025 SB2025121205
SB2025123045
SB2026010587
and 41 more
#VU109846 - Allocation of Resources Without Limits or Throttling
CVE-2025-47287
CWE-770 Medium
No
No
6.1.0-3ubuntu0.1~esm2, 6.4.0-1ubuntu0.2, 6.4.1-2ubuntu0.2, 6.4.2-1ubuntu0.25.04.1 27.05.2025 SB2025052726
SB2025052727
SB2025052728
and 30 more
#VU101068 - Resource exhaustion
CVE-2024-52804
CWE-400 Medium
No
No
Ubuntu Pro 02.12.2024 SB2024120203
SB2024120204
SB2024120383
and 16 more
#VU76397 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-28370
CWE-601 Medium
No
No
Ubuntu Pro 22.05.2023 SB2023052204
SB2023061333
SB2023062257
and 28 more