compactor (>=0.2.0, <=0.3.0), graphite-beacon (>=0.23.0, <=0.26.0) +1 more potentially affected by CVE-2026-103262 via tornado (4.1.0)

tornado PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - compactor =0.2.0, =0.23.0, =0.25.1, =0.25.4.2 Source cves: CVE-2026-103262 Source advisory: OSV:GHSA-CHX6-46F5-W4VP...