Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/python-tornado@6.4.2-1?distro=trixie
purl pkg:deb/debian/python-tornado@6.4.2-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-3y8v-vsd8-ubba Tornado has an HTTP cookie parsing DoS vulnerability The algorithm used for parsing HTTP cookies in Tornado versions prior to 6.4.2 sometimes has quadratic complexity, leading to excessive CPU consumption when parsing maliciously-crafted cookie headers. This parsing occurs in the event loop thread and may block the processing of other requests. See also CVE-2024-7592 for a similar vulnerability in cpython. CVE-2024-52804
GHSA-8w49-h785-mj3c

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T08:50:29.569795+00:00 Debian Importer Fixing VCID-3y8v-vsd8-ubba https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-11T17:56:23.460020+00:00 Debian Importer Fixing VCID-3y8v-vsd8-ubba https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:50:54.554091+00:00 Debian Importer Fixing VCID-3y8v-vsd8-ubba https://security-tracker.debian.org/tracker/data/json 38.1.0