1 matches found
CVE-2025-67725: Uncontrolled Resource Consumption
Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation...
7.5CVSS5.6AI score0.00559EPSS
SaveExploits0References1
20