The vulnerability of the _parseparam function in the httputil.py component of the Python Tornado web framework, which allows a hacker to cause a denial-of-service attack.

The vulnerability of the parseparam function in the httputil.py component of the Python Tornado web framework involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Excessive Iteration

Overview tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed. Affected versions of this package are vulnerable to Excessive Iteration in the parseparam function. An attacker can cause the server to become unresponsive and consume excessive CPU...