Known vulnerabilities in python3-tornado

Known vulnerabilities in python3-tornado

Vendor: OpenAnolis

Software: python3-tornado

Software CPE: cpe:2.3:o:openanolis:python3-tornado:*:*:*:*:*:anolis_os:*:*

Website: https://openanolis.cn/

Total vulnerabilities: 8

Public exploits: 0

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU149934 - Buffer over-read CVE-2026-49854	CWE-126	Medium	No	No	6.5.6-1	15.09.2026	SB2026091514 SB2026091521 SB2026091522 and 4 more
#VU128148 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2026-35536	CWE-74	Medium	No	No	6.5.2-3	27.04.2026	SB20260427102 SB20260427118 SB20260427149 and 10 more
#VU128147 - Resource exhaustion CVE-2026-31958	CWE-400	Medium	No	No	6.5.2-2	27.04.2026	SB20260427102 SB20260427109 SB20260427110 and 40 more
#VU119885 - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2025-67724	CWE-644	Low	No	No	6.5.2-1	12.12.2025	SB2025121205 SB2026010587 SB2026010938 and 35 more
#VU119884 - Excessive Iteration CVE-2025-67725	CWE-834	Low	No	No	6.4.2-3	12.12.2025	SB2025121205 SB2026010587 SB2026010938 and 41 more
#VU119883 - Excessive Iteration CVE-2025-67726	CWE-834	Medium	No	No	6.4.2-3	12.12.2025	SB2025121205 SB2025123045 SB2026010587 and 41 more
#VU109846 - Allocation of Resources Without Limits or Throttling CVE-2025-47287	CWE-770	Medium	No	No	6.4.2-2	27.05.2025	SB2025052726 SB2025052727 SB2025052728 and 30 more
#VU101068 - Resource exhaustion CVE-2024-52804	CWE-400	Medium	No	No	6.4.2-1	02.12.2024	SB2024120203 SB2024120204 SB2024120383 and 16 more