altimeter (>=6.0.2rc1, <=6.4.25), apertium-apy (0.11.6) +103 more potentially affected by CVE-2026-91990 via tornado (5.1.1)

tornado PYPI version 5.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - altimeter =6.0.2rc1, =0.45.0, =0.1.0, =0.3.0, =0.1.6, =0.7.0, =0.5.0, =0.1.1, =0.1.2 and more Source cves: CVE-2026-91990 Source advisory:...

analysisstore (0.0.5), bluesky-browser (0.1.0a1) +14 more potentially affected by CVE-2026-91990 via tornado (5.0.0b1)

tornado PYPI version 5.0.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - analysisstore 0.0.5 - bluesky-browser 0.1.0a1 - conftrak 0.0.6 - foebackend 1.0.0 - foeworkers 1.0.4 - httpwatcher 0.5.2 - legoman =1.0.0, =0.1....

aiida-core (>=1.0.0, <=1.5.3), aiogremlin (>=3.3.3, <=3.3.4) +80 more potentially affected by CVE-2026-91990 via tornado (4.5.3)

tornado PYPI version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - aiida-core =1.0.0, =3.3.3, =1.1.8, =3.9.0, =0.11.0rc1, =1.0.0, =0.1.1, =0.27.1, =2.0.3, =0.15.0, =0.1.0, =0.0.0, =0.0.3 and more Source cves:...

graphite-beacon (>=0.0.1, <=0.22.2) potentially affected by CVE-2026-91990 via tornado (4.0.2)

tornado PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - graphite-beacon =0.0.1, =0.22.2 Source cves: CVE-2026-91990 Source advisory: OSV:GHSA-8423-8FGW-73VQ...

abracadabra (>=0.0.0, <=0.0.7), ac-solver (0.1.0) +773 more potentially affected by CVE-2026-91990 via tornado (>=6.0.0b1, <=6.5.7)

tornado PYPI version =6.0.0b1, =0.0.0, =0.2.2, =0.7.3, =0.3.0, =0.4.0, =0.2.0, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.1.0, =0.3.1 and more Source cves: CVE-2026-91990 Source advisory: OSV:GHSA-8423-8FGW-73VQ...

django-omnibus (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-91990 via tornado (3.1.1)

tornado PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - django-omnibus =0.1.0, =0.2.0 Source cves: CVE-2026-91990 Source advisory: OSV:GHSA-8423-8FGW-73VQ...

gremlinpython (>=3.2.2rc1, <=3.3.0), shot-detector (>=0.0.4.dev68, <=0.0.5.dev3) +4 more potentially affected by CVE-2026-91990 via tornado (4.4.1)

tornado PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - gremlinpython =3.2.2rc1, =0.0.4.dev68, =0.1.0, =0.0.0, =0.0.1, =0.1.0, =0.1.6 Source cves: CVE-2026-91990 Source advisory: OSV:GHSA-8423-8FGW-73VQ...

abracadabra (>=0.0.0, <=0.0.7), ac-solver (0.1.0) +773 more potentially affected by CVE-2026-91990 via tornado (>=6.0.0b1, <=6.5.7)

tornado PYPI version =6.0.0b1, =0.0.0, =0.2.2, =0.7.3, =0.3.0, =0.4.0, =0.2.0, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.1.0, =0.3.1 and more Source cves: CVE-2026-91990 Source advisory: SNYK:PYTHON-TORNADO-19498529...

EUVD-2025-91990

Malicious code in fajar-tempe93-miaww npm...

HP System Management Homepage Local Privilege Escalation

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...