4 matches found
MGASA-2026-0216 Updated python-tornado packages fix security vulnerabilities
Tornado has a DoS due to too many multipart parts. CVE-2026-31958 In Tornado, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.setcookie were not checked for crafted characters. CVE-2026-35536...
8.7CVSS5.3AI score0.00375EPSS
SaveExploits0References3
20