Known vulnerabilities in python-tornado (Red Hat package)
Vendor:
Red Hat Inc.
Software:
python-tornado (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:python-tornado_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
9
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (9)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU149941 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-103262 |
CWE-409 | Medium | 6.5.10-0.el10_0.1 | 15.09.2026 |
SB2026091517 SB2026102807 SB2026103128 |
||
| #VU149938 - Resource exhaustion CVE-2026-91990 |
CWE-400 | Medium | 6.5.8-0.el10_0.1 | 15.09.2026 |
SB2026091516 SB2026101250 SB2026103128 |
||
| #VU149936 - Exposure of sensitive information to an unauthorized actor CVE-2026-49853 |
CWE-200 | Low | 6.4.2-1.el9_4.3, 6.5.8-0.el9_8.1, 6.5.8-0.el10_0.1 | 15.09.2026 |
SB2026091514 SB2026091521 SB2026091522 and 6 more |
||
| #VU149935 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-49855 |
CWE-409 | Medium | 6.5.8-0.el9_8.1, 6.5.8-0.el10_0.1 | 15.09.2026 |
SB2026091514 SB2026091521 SB2026091522 and 5 more |
||
| #VU128148 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2026-35536 |
CWE-74 | Medium | 4.2.1-5.el7_9.3, 6.4.2-1.el9_4.2, 6.4.2-1.el10_0.2, 6.5.5-1.el9_7.1, 6.5.5-1.el10_1.1 | 27.04.2026 |
SB20260427102 SB20260427118 SB20260427149 and 10 more |
||
| #VU128147 - Resource exhaustion CVE-2026-31958 |
CWE-400 | Medium | 4.2.1-5.el7_9.3, 6.4.2-1.el9_4.2, 6.4.2-1.el10_0.2, 6.5.5-1.el9_7.1, 6.5.5-1.el10_1.1 | 27.04.2026 |
SB20260427102 SB20260427109 SB20260427110 and 40 more |
||
| #VU109846 - Allocation of Resources Without Limits or Throttling CVE-2025-47287 |
CWE-770 | Medium | 4.2.1-5.el7_9.1, 6.4.2-1.el9_2.1, 6.4.2-1.el9_4.1, 6.4.2-1.el10_0.1, 6.4.2-2.el9_6.2 | 27.05.2025 |
SB2025052726 SB2025052727 SB2025052728 and 30 more |
||
| #VU101068 - Resource exhaustion CVE-2024-52804 |
CWE-400 | Medium | 6.4.2-1.el9_2, 6.4.2-1.el9_4, 6.4.2-1.el9_5 | 02.12.2024 |
SB2024120203 SB2024120204 SB2024120383 and 16 more |
||
| #VU76397 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-28370 |
CWE-601 | Medium | 6.1.0-9.el9 | 22.05.2023 |
SB2023052204 SB2023061333 SB2023062257 and 28 more |