Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-y1z8-z2f1-mqg7

Summary tornado: Tornado Quadratic DoS via Crafted Multipart Parameters

Aliases

alias	CVE-2025-67726

Fixed_packages

url	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=aarch64&distroversion=edge&reponame=community
purl	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=aarch64&distroversion=edge&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-tornado@6.5.4-r0%3Farch=aarch64&distroversion=edge&reponame=community

url	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=armhf&distroversion=edge&reponame=community
purl	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=armhf&distroversion=edge&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-tornado@6.5.4-r0%3Farch=armhf&distroversion=edge&reponame=community

url	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=armv7&distroversion=edge&reponame=community
purl	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=armv7&distroversion=edge&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-tornado@6.5.4-r0%3Farch=armv7&distroversion=edge&reponame=community

url	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=s390x&distroversion=edge&reponame=community
purl	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=s390x&distroversion=edge&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-tornado@6.5.4-r0%3Farch=s390x&distroversion=edge&reponame=community

url	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=loongarch64&distroversion=edge&reponame=community
purl	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=loongarch64&distroversion=edge&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-tornado@6.5.4-r0%3Farch=loongarch64&distroversion=edge&reponame=community

url	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=ppc64le&distroversion=edge&reponame=community
purl	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=ppc64le&distroversion=edge&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-tornado@6.5.4-r0%3Farch=ppc64le&distroversion=edge&reponame=community

url	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=riscv64&distroversion=edge&reponame=community
purl	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=riscv64&distroversion=edge&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-tornado@6.5.4-r0%3Farch=riscv64&distroversion=edge&reponame=community

url	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=x86&distroversion=edge&reponame=community
purl	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=x86&distroversion=edge&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-tornado@6.5.4-r0%3Farch=x86&distroversion=edge&reponame=community

url	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=x86_64&distroversion=edge&reponame=community
purl	pkg:apk/alpine/py3-tornado@6.5.4-r0?arch=x86_64&distroversion=edge&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/py3-tornado@6.5.4-r0%3Farch=x86_64&distroversion=edge&reponame=community

url	pkg:deb/debian/python-tornado@6.1.0-1?distro=trixie
purl	pkg:deb/debian/python-tornado@6.1.0-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.1.0-1%3Fdistro=trixie

url	pkg:deb/debian/python-tornado@6.1.0-1%2Bdeb11u3?distro=trixie
purl	pkg:deb/debian/python-tornado@6.1.0-1%2Bdeb11u3?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.1.0-1%252Bdeb11u3%3Fdistro=trixie

url pkg:deb/debian/python-tornado@6.2.0-3%2Bdeb12u2?distro=trixie

purl pkg:deb/debian/python-tornado@6.2.0-3%2Bdeb12u2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.2.0-3%252Bdeb12u2%3Fdistro=trixie

url pkg:deb/debian/python-tornado@6.2.0-3%2Bdeb12u2

purl pkg:deb/debian/python-tornado@6.2.0-3%2Bdeb12u2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.2.0-3%252Bdeb12u2

url	pkg:deb/debian/python-tornado@6.2.0-3%2Bdeb12u4?distro=trixie
purl	pkg:deb/debian/python-tornado@6.2.0-3%2Bdeb12u4?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.2.0-3%252Bdeb12u4%3Fdistro=trixie

url	pkg:deb/debian/python-tornado@6.2.0-3%2Bdeb12u4
purl	pkg:deb/debian/python-tornado@6.2.0-3%2Bdeb12u4
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.2.0-3%252Bdeb12u4

url pkg:deb/debian/python-tornado@6.4.2-3?distro=trixie

purl pkg:deb/debian/python-tornado@6.4.2-3?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.4.2-3%3Fdistro=trixie

url	pkg:deb/debian/python-tornado@6.4.2-3%2Bdeb13u2
purl	pkg:deb/debian/python-tornado@6.4.2-3%2Bdeb13u2
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.4.2-3%252Bdeb13u2

url	pkg:deb/debian/python-tornado@6.4.2-3%2Bdeb13u2?distro=trixie
purl	pkg:deb/debian/python-tornado@6.4.2-3%2Bdeb13u2?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.4.2-3%252Bdeb13u2%3Fdistro=trixie

url	pkg:deb/debian/python-tornado@6.5.4-0.1?distro=trixie
purl	pkg:deb/debian/python-tornado@6.5.4-0.1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.5.4-0.1%3Fdistro=trixie

url pkg:deb/debian/python-tornado@6.5.4-1?distro=trixie

purl pkg:deb/debian/python-tornado@6.5.4-1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-nq24-395d-wuar

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.5.4-1%3Fdistro=trixie

url	pkg:deb/debian/python-tornado@6.5.5-1?distro=trixie
purl	pkg:deb/debian/python-tornado@6.5.5-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.5.5-1%3Fdistro=trixie

Affected_packages

url pkg:deb/debian/python-tornado@1.0.1-1

purl pkg:deb/debian/python-tornado@1.0.1-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1mw1-384y-huc7

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-3y8v-vsd8-ubba

vulnerability	VCID-62bx-a5uf-j3b4

vulnerability	VCID-6knn-nt2y-1uem

vulnerability	VCID-8kva-hv12-9ydc

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-byy6-ku5b-ykew

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@1.0.1-1

url pkg:deb/debian/python-tornado@1.0.1-1%2Bdeb6u1

purl pkg:deb/debian/python-tornado@1.0.1-1%2Bdeb6u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1mw1-384y-huc7

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-3y8v-vsd8-ubba

vulnerability	VCID-62bx-a5uf-j3b4

vulnerability	VCID-6knn-nt2y-1uem

vulnerability	VCID-8kva-hv12-9ydc

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-byy6-ku5b-ykew

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@1.0.1-1%252Bdeb6u1

url pkg:deb/debian/python-tornado@2.3-2

purl pkg:deb/debian/python-tornado@2.3-2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1mw1-384y-huc7

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-3y8v-vsd8-ubba

vulnerability	VCID-62bx-a5uf-j3b4

vulnerability	VCID-6knn-nt2y-1uem

vulnerability	VCID-8kva-hv12-9ydc

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@2.3-2

url pkg:deb/debian/python-tornado@3.2.2-1.1

purl pkg:deb/debian/python-tornado@3.2.2-1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-3y8v-vsd8-ubba

vulnerability	VCID-62bx-a5uf-j3b4

vulnerability	VCID-6knn-nt2y-1uem

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@3.2.2-1.1

url pkg:deb/debian/python-tornado@4.4.2-1~bpo8%2B2

purl pkg:deb/debian/python-tornado@4.4.2-1~bpo8%2B2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-3y8v-vsd8-ubba

vulnerability	VCID-62bx-a5uf-j3b4

vulnerability	VCID-6knn-nt2y-1uem

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@4.4.2-1~bpo8%252B2

url pkg:deb/debian/python-tornado@4.4.3-1~bpo8%2B1

purl pkg:deb/debian/python-tornado@4.4.3-1~bpo8%2B1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-3y8v-vsd8-ubba

vulnerability	VCID-62bx-a5uf-j3b4

vulnerability	VCID-6knn-nt2y-1uem

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@4.4.3-1~bpo8%252B1

url pkg:deb/debian/python-tornado@4.4.3-1

purl pkg:deb/debian/python-tornado@4.4.3-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-3y8v-vsd8-ubba

vulnerability	VCID-62bx-a5uf-j3b4

vulnerability	VCID-6knn-nt2y-1uem

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@4.4.3-1

url pkg:deb/debian/python-tornado@5.1.1-4

purl pkg:deb/debian/python-tornado@5.1.1-4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-3y8v-vsd8-ubba

vulnerability	VCID-62bx-a5uf-j3b4

vulnerability	VCID-6knn-nt2y-1uem

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@5.1.1-4

url pkg:deb/debian/python-tornado@6.1.0-1

purl pkg:deb/debian/python-tornado@6.1.0-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-3y8v-vsd8-ubba

vulnerability	VCID-62bx-a5uf-j3b4

vulnerability	VCID-6knn-nt2y-1uem

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.1.0-1

url pkg:deb/debian/python-tornado@6.2.0-3%2Bdeb12u2?distro=trixie

purl pkg:deb/debian/python-tornado@6.2.0-3%2Bdeb12u2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.2.0-3%252Bdeb12u2%3Fdistro=trixie

url pkg:deb/debian/python-tornado@6.2.0-3%2Bdeb12u2

purl pkg:deb/debian/python-tornado@6.2.0-3%2Bdeb12u2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.2.0-3%252Bdeb12u2

url pkg:deb/debian/python-tornado@6.4.2-3?distro=trixie

purl pkg:deb/debian/python-tornado@6.4.2-3?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.4.2-3%3Fdistro=trixie

url pkg:deb/debian/python-tornado@6.4.2-3

purl pkg:deb/debian/python-tornado@6.4.2-3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-be89-uuxa-fyb5

vulnerability	VCID-g13r-ansu-27av

vulnerability	VCID-nq24-395d-wuar

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.4.2-3

url pkg:rpm/redhat/pcs@0.10.8-1.el8_4?arch=10

purl pkg:rpm/redhat/pcs@0.10.8-1.el8_4?arch=10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-jsc5-qvjm-6kek

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/pcs@0.10.8-1.el8_4%3Farch=10

url pkg:rpm/redhat/pcs@0.10.12-6.el8_6?arch=12

purl pkg:rpm/redhat/pcs@0.10.12-6.el8_6?arch=12

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-jsc5-qvjm-6kek

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/pcs@0.10.12-6.el8_6%3Farch=12

url pkg:rpm/redhat/pcs@0.10.15-4.el8_8?arch=10

purl pkg:rpm/redhat/pcs@0.10.15-4.el8_8?arch=10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-jsc5-qvjm-6kek

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/pcs@0.10.15-4.el8_8%3Farch=10

url pkg:rpm/redhat/pcs@0.10.18-2.el8_10?arch=8

purl pkg:rpm/redhat/pcs@0.10.18-2.el8_10?arch=8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/pcs@0.10.18-2.el8_10%3Farch=8

url pkg:rpm/redhat/pcs@0.11.1-10.el9_0?arch=10

purl pkg:rpm/redhat/pcs@0.11.1-10.el9_0?arch=10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-27x3-ch78-8ueh

vulnerability	VCID-jsc5-qvjm-6kek

vulnerability	VCID-y1z8-z2f1-mqg7

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/pcs@0.11.1-10.el9_0%3Farch=10

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-67726.json

reference_id

reference_type

scores

value	5.3
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-67726.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2025-67726

reference_id

reference_type

scores

value	0.00118
scoring_system	epss
scoring_elements	0.30824
published_at	2026-04-02T12:55:00Z

value	0.00118
scoring_system	epss
scoring_elements	0.30739
published_at	2026-04-12T12:55:00Z

value	0.00118
scoring_system	epss
scoring_elements	0.30783
published_at	2026-04-11T12:55:00Z

value	0.00118
scoring_system	epss
scoring_elements	0.3078
published_at	2026-04-09T12:55:00Z

value	0.00118
scoring_system	epss
scoring_elements	0.30748
published_at	2026-04-08T12:55:00Z

value	0.00118
scoring_system	epss
scoring_elements	0.30872
published_at	2026-04-04T12:55:00Z

value	0.00118
scoring_system	epss
scoring_elements	0.30691
published_at	2026-04-07T12:55:00Z

value	0.00124
scoring_system	epss
scoring_elements	0.31634
published_at	2026-04-16T12:55:00Z

value	0.00124
scoring_system	epss
scoring_elements	0.31601
published_at	2026-04-13T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2025-67726

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67726
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67726

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1122663
reference_id	1122663
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1122663

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=2421733
reference_id	2421733
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=2421733

reference_url

https://github.com/tornadoweb/tornado/commit/771472cfdaeebc0d89a9cc46e249f8891a6b29cd

reference_id

771472cfdaeebc0d89a9cc46e249f8891a6b29cd

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-18T18:47:53Z/

url

https://github.com/tornadoweb/tornado/commit/771472cfdaeebc0d89a9cc46e249f8891a6b29cd

reference_url

https://github.com/tornadoweb/tornado/security/advisories/GHSA-jhmp-mqwm-3gq8

reference_id

GHSA-jhmp-mqwm-3gq8

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-18T18:47:53Z/

url

https://github.com/tornadoweb/tornado/security/advisories/GHSA-jhmp-mqwm-3gq8

reference_url	https://access.redhat.com/errata/RHSA-2026:0930
reference_id	RHSA-2026:0930
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:0930

reference_url	https://access.redhat.com/errata/RHSA-2026:2106
reference_id	RHSA-2026:2106
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:2106

reference_url	https://access.redhat.com/errata/RHSA-2026:2462
reference_id	RHSA-2026:2462
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:2462

reference_url	https://access.redhat.com/errata/RHSA-2026:2465
reference_id	RHSA-2026:2465
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:2465

reference_url	https://access.redhat.com/errata/RHSA-2026:2469
reference_id	RHSA-2026:2469
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:2469

reference_url	https://access.redhat.com/errata/RHSA-2026:2484
reference_id	RHSA-2026:2484
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:2484

reference_url	https://access.redhat.com/errata/RHSA-2026:3713
reference_id	RHSA-2026:3713
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:3713

reference_url	https://usn.ubuntu.com/7950-1/
reference_id	USN-7950-1
reference_type
scores
url	https://usn.ubuntu.com/7950-1/

reference_url

https://github.com/tornadoweb/tornado/releases/tag/v6.5.3

reference_id

v6.5.3

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-18T18:47:53Z/

url

https://github.com/tornadoweb/tornado/releases/tag/v6.5.3

Weaknesses

cwe_id	1333
name	Inefficient Regular Expression Complexity
description	The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.

cwe_id	400
name	Uncontrolled Resource Consumption
description	The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

cwe_id	834
name	Excessive Iteration
description	The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

Exploits

Severity_range_score 5.3 - 7.5

Exploitability 0.5

Weighted_severity 6.8

Risk_score 3.4

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y1z8-z2f1-mqg7

Vulnerability Instance