74 matches found
ROOT-APP-PYPI-CVE-2025-47287 CVE-2025-47287 in tornado - Patched by Root
Root has patched CVE-2025-47287 in the tornado package for Root:PyPI. Multiple fixed versions available...
Photon OS 5.0: Python3 PHSA-2025-5.0-91-0595
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0595. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Python3 PHSA-2025-5.0-92-0595
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0595. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
analysisstore (0.0.5), bluesky-browser (0.1.0a1) +14 more potentially affected by CVE-2025-47287 via tornado (5.0.0b1)
tornado PYPI version 5.0.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - analysisstore 0.0.5 - bluesky-browser 0.1.0a1 - conftrak 0.0.6 - foebackend 1.0.0 - foeworkers 1.0.4 - httpwatcher 0.5.2 - legoman =1.0.0, =0.1....
graphite-beacon (>=0.0.1, <=0.22.2) potentially affected by CVE-2025-47287 via tornado (4.0.2)
tornado PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - graphite-beacon =0.0.1, =0.22.2 Source cves: CVE-2025-47287 Source advisory: OSV:PYSEC-2026-1974...
torext (0.10.0) potentially affected by CVE-2025-47287 via tornado (3.0.0)
tornado PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - torext 0.10.0 Source cves: CVE-2025-47287 Source advisory: OSV:PYSEC-2026-1974...
bb8 (>=0.1.0, <=0.2.6), blackgate (>=0.1.0, <=0.1.1) +5 more potentially affected by CVE-2025-47287 via tornado (4.3.0)
tornado PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - bb8 =0.1.0, =0.1.0, =0.1.7, =0.3.4 - twitch-pybot 0.1.4.post2 - weditor 0.0.2.dev2 Source cves: CVE-2025-47287 Source advisory: OSV:PYSEC-2026-197...
bokcolmaps (>=0.1.0, <=0.2.1), bokodapviewer (>=0.1.0, <=0.1.1) +8 more potentially affected by CVE-2025-47287 via tornado (4.4.2)
tornado PYPI version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - bokcolmaps =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.8.4, =0.1.7, =0.0.1, =0.0.14 Source cves: CVE-2025-47287 Source advisory: OSV:PYSEC-2026-1974...
anomalydetection (0.0.0.dev1), dataprep (>=0.2.10a0, <=0.2.14) +12 more potentially affected by CVE-2025-47287 via tornado (5.0.2)
tornado PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - anomalydetection 0.0.0.dev1 - dataprep =0.2.10a0, =1.4.0, =0.2.3, =0.10.4, =3.0.4, =1.3.0, =1.1.0, =0.0.6rc1, =0.5.18, =0.5.21 Source cves:...
altimeter (>=6.0.2rc1, <=6.4.25), apertium-apy (0.11.6) +103 more potentially affected by CVE-2025-47287 via tornado (5.1.1)
tornado PYPI version 5.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - altimeter =6.0.2rc1, =0.45.0, =0.1.0, =0.3.0, =0.1.6, =0.7.0, =0.5.0, =0.1.1, =0.1.2 and more Source cves: CVE-2025-47287 Source advisory:...
abracadabra (>=0.0.0, <=0.0.7), ac-solver (0.1.0) +580 more potentially affected by CVE-2025-47287 via tornado (>=6.0.0b1, <=6.4.2)
tornado PYPI version =6.0.0b1, =0.0.0, =0.7.3, =1.0.0, =1.0.0, =1.3.0, =0.1.23, =0.0.9.1, =0.20.0, =0.9.5, =22.5.13, =0.0.2, =0.1.0, =0.1.3 - antpool 0.12.0 and more Source cves: CVE-2025-47287 Source advisory: OSV:PYSEC-2026-1974...
monasca-agent (1.1.20), rejected (>=3.12.0, <=3.19.9) +1 more potentially affected by CVE-2025-47287 via tornado (4.2.1)
tornado PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - monasca-agent 1.1.20 - rejected =3.12.0, =1.0.0, =1.4.0 Source cves: CVE-2025-47287 Source advisory: OSV:PYSEC-2026-1974...
MiracleLinux 8 : pcs-0.10.18-2.el8_10.5.ML.1 (AXSA:2025-10529:04)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10529:04 advisory. rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser CVE-2025-46727 tornado: Tornado Multipart Form-Data Denial of Service CVE-2025-47287...
Mageia: Security Advisory (MGASA-2025-0282)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2025-0282 Updated python-tornado packages fix security vulnerability
Tornado vulnerable to excessive logging caused by malformed multipart form data. CVE-2025-47287...
python-tornado security update
An update is available for python-tornado. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...
Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to tornado-6.4.2-cp38-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl CVE-2025-47287
Summary IBM Maximo Application Suite - Monitor Component is vulnerable to tornado-6.4.2-cp38-abi3-manylinux25x8664.manylinux1x8664.manylinux217x8664.manylinux2014x8664.whl CVE-2025-47287. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...
SUSE SLES15: python3-salt / salt / salt-api / salt-bash-completion / salt-cloud / etc (SUSE-SU-2025:02534-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02534-1 advisory. - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation bsc1244561 - CVE-2024-38823: Fixed server vulnerability t...
Oracle Linux 7 : python-tornado (ELSA-2025-8664)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8664 advisory. 4.2.1-5.0.1 - Fixed CVE-2025-47287 Raise errors instead of logging Orabug: 38049949 Tenable has extracted the preceding description block directly from the Orac...
