Amazon Linux 2023 : python3-tornado (ALAS2023-2026-3292)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3292 advisory. Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response...