Known vulnerabilities in python-tornado

Vendor: openEuler
Software: python-tornado
Software CPE: cpe:2.3:o:openeuler:python-tornado:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python-tornado python-tornado is affected by 12 known vulnerabilities: 9 medium, 3 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149939 - Improper Validation of Specified Quantity in Input
CVE-2026-82397		 CWE-1284 Medium
No
No
 6.5-6 15.09.2026 SB2026091516
SB2026091526
SB2026091527
and 3 more
#VU149936 - Exposure of sensitive information to an unauthorized actor
CVE-2026-49853		 CWE-200 Low
No
No
 6.5-5 15.09.2026 SB2026091514
SB2026091521
SB2026091522
and 4 more
#VU149935 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-49855		 CWE-409 Medium
No
No
 6.5-5 15.09.2026 SB2026091514
SB2026091521
SB2026091522
and 4 more
#VU149934 - Buffer over-read
CVE-2026-49854		 CWE-126 Medium
No
No
 6.5-5 15.09.2026 SB2026091514
SB2026091521
SB2026091522
and 4 more
#VU128148 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-35536		 CWE-74 Medium
No
No
 6.5-4 27.04.2026 SB20260427102
SB20260427118
SB20260427149
and 10 more
#VU128147 - Resource exhaustion
CVE-2026-31958		 CWE-400 Medium
No
No
 6.1-6, 6.5-3 27.04.2026 SB20260427102
SB20260427109
SB20260427110
and 40 more
#VU119885 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-67724		 CWE-644 Low
No
No
 6.5-4 12.12.2025 SB2025121205
SB2026010587
SB2026010938
and 35 more
#VU119884 - Excessive Iteration
CVE-2025-67725		 CWE-834 Low
No
No
 6.5-2 12.12.2025 SB2025121205
SB2026010587
SB2026010938
and 41 more
#VU119883 - Excessive Iteration
CVE-2025-67726		 CWE-834 Medium
No
No
 6.5-2 12.12.2025 SB2025121205
SB2025123045
SB2026010587
and 41 more
#VU109846 - Allocation of Resources Without Limits or Throttling
CVE-2025-47287		 CWE-770 Medium
No
No
 5.0.2-10, 6.1-4, 6.5-1 27.05.2025 SB2025052726
SB2025052727
SB2025052728
and 30 more
#VU101068 - Resource exhaustion
CVE-2024-52804		 CWE-400 Medium
No
No
 6.1-3 02.12.2024 SB2024120203
SB2024120204
SB2024120383
and 16 more
#VU76397 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-28370		 CWE-601 Medium
No
No
 5.0.2-8 22.05.2023 SB2023052204
SB2023061333
SB2023062257
and 28 more