Known vulnerabilities in python-tornado (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
python-tornado (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:python-tornado_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
8
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
6.5.4-0.1ubuntu0.1
4.2.1-1ubuntu3.1+esm3
4.5.3-1ubuntu0.2+esm3
6.0.3+really5.1.1-3ubuntu0.1~esm5
6.1.0-3ubuntu0.1~esm5
6.4.0-1ubuntu0.5
6.4.2-3ubuntu0.3
4.2.1-1ubuntu3.1+esm2
4.5.3-1ubuntu0.2+esm2
6.0.3+really5.1.1-3ubuntu0.1~esm3
6.1.0-3ubuntu0.1~esm4
6.4.0-1ubuntu0.4
6.4.2-1ubuntu0.25.04.3
6.4.2-3ubuntu0.2
6.1.0-3build1
6.1.0-1build3
6.1.0-1build1
6.0.4-2build1
6.4.2-3
6.4.2-2ubuntu1
6.4.2-2
6.4.2-1
6.4.1-3
6.4.1-2ubuntu0.1
6.4.1-2
6.4.1-1
6.4.0-2
6.4.0-1ubuntu0.1
6.4.0-1build1
6.4.0-1
6.4.0-0ubuntu1
6.3.2-1
6.2.0-3ubuntu0.1
6.0.4-1
6.0.4-2
6.0.4-3
6.1.0-1
6.1.0-2
6.1.0-3
6.2.0-1
6.2.0-2
6.2.0-3
6.1.0-3ubuntu0.1~esm2
6.4.0-1ubuntu0.2
6.4.1-2ubuntu0.2
6.4.2-1ubuntu0.25.04.1
Ubuntu Pro
4.5.3-1ubuntu0.2
4.2.1-1ubuntu3.1
6.0.3+really5.1.1
5.1.1
4.5.3
2.1.0
2.1.0-2ubuntu0.1
4.2.1
3.1.1
6.0.3+really5.1.1-3
6.0.3+really5.1.1-2build2
6.0.3+really5.1.1-2build1
5.1.1-4ubuntu3
6.0.3-1
6.0.3+really5.1.1-1
6.0.3+really5.1.1-2
5.1.1-4ubuntu5
5.1.1-4ubuntu2
5.1.1-4ubuntu4
5.1.1-3
5.1.1-4
5.1.1-4ubuntu1
4.5.3-1ubuntu0.1
5.1.1-2ubuntu2
5.1.1-2ubuntu1
5.1.1-1
5.1.1-2
5.0.0-1
5.0.0-2
5.0.2-1
5.0.2-1build1
5.0.2-1.0ubuntu1
4.5.3-1
4.5.2-1
4.5.1-2.1~build2
4.5.1-2.1~build1
4.5.1-1
4.5.1-2
4.5.1-2ubuntu1
4.5.1-0ubuntu1
4.4.3-1ubuntu2
4.4.3-1ubuntu3
4.4.3-1
4.4.3-1ubuntu1
4.4.2-1
4.4.2-1ubuntu1
4.4.1-2
4.4.1-2ubuntu1
4.4.1-1
4.4.1-1ubuntu1
4.3.0-2ubuntu3
4.3.0-2ubuntu4
4.3.0-2ubuntu2
4.3.0-2
4.3.0-2ubuntu1
4.2.1-2
4.3.0-1
4.3.0-1ubuntu1
4.2.1-1ubuntu3
4.2.1-1ubuntu2
4.2.1-1ubuntu1
4.2.1-1
4.2.0-1build1
3.2.2-1
3.2.2-1.1
4.2.0-1
0.2-1
1.0.1-1
1.2.0-1
1.2.1-1
2.1.0-1
2.1.0-2
2.1.0-3
2.3-1
2.3-2
2.4.1-1
2.4.1-2
2.4.1-3
3.1.1-1
3.1.1-1ubuntu1
3.1.1-1ubuntu2
3.2.0-1
3.2.0-1ubuntu1
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU128148 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2026-35536 |
CWE-74 | Medium | 4.2.1-1ubuntu3.1+esm3, 4.5.3-1ubuntu0.2+esm3, 6.0.3+really5.1.1-3ubuntu0.1~esm5, 6.1.0-3ubuntu0.1~esm5, 6.4.0-1ubuntu0.5, 6.4.2-3ubuntu0.3, 6.5.4-0.1ubuntu0.1 | 27.04.2026 |
SB20260427102 SB20260427118 SB20260427149 and 10 more |
||
| #VU128147 - Resource exhaustion CVE-2026-31958 |
CWE-400 | Medium | 4.2.1-1ubuntu3.1+esm3, 4.5.3-1ubuntu0.2+esm3, 6.0.3+really5.1.1-3ubuntu0.1~esm5, 6.1.0-3ubuntu0.1~esm5, 6.4.0-1ubuntu0.5, 6.4.2-3ubuntu0.3, 6.5.4-0.1ubuntu0.1 | 27.04.2026 |
SB20260427102 SB20260427109 SB20260427110 and 40 more |
||
| #VU119885 - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2025-67724 |
CWE-644 | Low | 4.2.1-1ubuntu3.1+esm2, 4.5.3-1ubuntu0.2+esm2, 6.0.3+really5.1.1-3ubuntu0.1~esm3, 6.1.0-3ubuntu0.1~esm4, 6.4.0-1ubuntu0.4, 6.4.2-1ubuntu0.25.04.3, 6.4.2-3ubuntu0.2 | 12.12.2025 |
SB2025121205 SB2026010587 SB2026010938 and 35 more |
||
| #VU119884 - Excessive Iteration CVE-2025-67725 |
CWE-834 | Low | 4.2.1-1ubuntu3.1+esm2, 4.5.3-1ubuntu0.2+esm2, 6.0.3+really5.1.1-3ubuntu0.1~esm3, 6.1.0-3ubuntu0.1~esm4, 6.4.0-1ubuntu0.4, 6.4.2-1ubuntu0.25.04.3, 6.4.2-3ubuntu0.2 | 12.12.2025 |
SB2025121205 SB2026010587 SB2026010938 and 41 more |
||
| #VU119883 - Excessive Iteration CVE-2025-67726 |
CWE-834 | Medium | 4.2.1-1ubuntu3.1+esm2, 4.5.3-1ubuntu0.2+esm2, 6.0.3+really5.1.1-3ubuntu0.1~esm3, 6.1.0-3ubuntu0.1~esm4, 6.4.0-1ubuntu0.4, 6.4.2-1ubuntu0.25.04.3, 6.4.2-3ubuntu0.2 | 12.12.2025 |
SB2025121205 SB2025123045 SB2026010587 and 41 more |
||
| #VU109846 - Allocation of Resources Without Limits or Throttling CVE-2025-47287 |
CWE-770 | Medium | 6.1.0-3ubuntu0.1~esm2, 6.4.0-1ubuntu0.2, 6.4.1-2ubuntu0.2, 6.4.2-1ubuntu0.25.04.1 | 27.05.2025 |
SB2025052726 SB2025052727 SB2025052728 and 30 more |
||
| #VU101068 - Resource exhaustion CVE-2024-52804 |
CWE-400 | Medium | Ubuntu Pro | 02.12.2024 |
SB2024120203 SB2024120204 SB2024120383 and 16 more |
||
| #VU76397 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-28370 |
CWE-601 | Medium | Ubuntu Pro | 22.05.2023 |
SB2023052204 SB2023061333 SB2023062257 and 28 more |