Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/37232?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37232?format=api", "vulnerability_id": "VCID-96r3-89by-dyer", "summary": "Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsing occurs synchronously on the main thread, this creates the possibility of denial-of-service due to the cost of parsing very large multipart bodies with many parts. This vulnerability is fixed in 6.5.5.", "aliases": [ { "alias": "CVE-2026-31958" }, { "alias": "GHSA-qjxf-f2mg-c6mc" }, { "alias": "PYSEC-2026-140" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/48593?format=api", "purl": "pkg:pypi/tornado@6.5.5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.5.5" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/7214?format=api", "purl": "pkg:pypi/tornado@0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" }, { "vulnerability": "VCID-sxra-vqmr-fybt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/7215?format=api", "purl": "pkg:pypi/tornado@1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" }, { "vulnerability": "VCID-sxra-vqmr-fybt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/7216?format=api", "purl": "pkg:pypi/tornado@1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" }, { "vulnerability": "VCID-sxra-vqmr-fybt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/7217?format=api", "purl": "pkg:pypi/tornado@1.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" }, { "vulnerability": "VCID-sxra-vqmr-fybt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@1.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/7218?format=api", "purl": "pkg:pypi/tornado@1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" }, { "vulnerability": "VCID-sxra-vqmr-fybt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/7219?format=api", "purl": "pkg:pypi/tornado@1.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" }, { "vulnerability": "VCID-sxra-vqmr-fybt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@1.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/7220?format=api", "purl": "pkg:pypi/tornado@2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" }, { "vulnerability": "VCID-sxra-vqmr-fybt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/7221?format=api", "purl": "pkg:pypi/tornado@2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" }, { "vulnerability": "VCID-sxra-vqmr-fybt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/7222?format=api", "purl": "pkg:pypi/tornado@2.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" }, { "vulnerability": "VCID-sxra-vqmr-fybt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/7223?format=api", "purl": "pkg:pypi/tornado@2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" }, { "vulnerability": "VCID-sxra-vqmr-fybt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/7224?format=api", "purl": "pkg:pypi/tornado@2.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/14897?format=api", "purl": "pkg:pypi/tornado@2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/14898?format=api", "purl": "pkg:pypi/tornado@2.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/14899?format=api", "purl": "pkg:pypi/tornado@2.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/14900?format=api", "purl": "pkg:pypi/tornado@3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/14901?format=api", "purl": "pkg:pypi/tornado@3.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/14902?format=api", "purl": "pkg:pypi/tornado@3.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/14903?format=api", "purl": "pkg:pypi/tornado@3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/14904?format=api", "purl": "pkg:pypi/tornado@3.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/14905?format=api", "purl": "pkg:pypi/tornado@3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/14906?format=api", "purl": "pkg:pypi/tornado@3.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" }, { "vulnerability": "VCID-gbeg-1cjj-fufw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/14907?format=api", "purl": "pkg:pypi/tornado@3.2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.2.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/33761?format=api", "purl": "pkg:pypi/tornado@4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/33762?format=api", "purl": "pkg:pypi/tornado@4.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33763?format=api", "purl": "pkg:pypi/tornado@4.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/33764?format=api", "purl": "pkg:pypi/tornado@4.1b2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.1b2" }, { "url": "http://public2.vulnerablecode.io/api/packages/33765?format=api", "purl": "pkg:pypi/tornado@4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33766?format=api", "purl": "pkg:pypi/tornado@4.2b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.2b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33767?format=api", "purl": "pkg:pypi/tornado@4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/33768?format=api", "purl": "pkg:pypi/tornado@4.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33769?format=api", "purl": "pkg:pypi/tornado@4.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.3b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33770?format=api", "purl": "pkg:pypi/tornado@4.3b2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.3b2" }, { "url": "http://public2.vulnerablecode.io/api/packages/33771?format=api", "purl": "pkg:pypi/tornado@4.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/33772?format=api", "purl": "pkg:pypi/tornado@4.4b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.4b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33773?format=api", "purl": "pkg:pypi/tornado@4.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/33774?format=api", "purl": "pkg:pypi/tornado@4.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33775?format=api", "purl": "pkg:pypi/tornado@4.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.4.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/33776?format=api", "purl": "pkg:pypi/tornado@4.4.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.4.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/33777?format=api", "purl": "pkg:pypi/tornado@4.5b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.5b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33778?format=api", "purl": "pkg:pypi/tornado@4.5b2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.5b2" }, { "url": "http://public2.vulnerablecode.io/api/packages/33779?format=api", "purl": "pkg:pypi/tornado@4.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/33780?format=api", "purl": "pkg:pypi/tornado@4.5.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.5.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33781?format=api", "purl": "pkg:pypi/tornado@4.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.5.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/33782?format=api", "purl": "pkg:pypi/tornado@4.5.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@4.5.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/33783?format=api", "purl": "pkg:pypi/tornado@5.0a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@5.0a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33784?format=api", "purl": "pkg:pypi/tornado@5.0b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@5.0b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33785?format=api", "purl": "pkg:pypi/tornado@5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@5.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/33786?format=api", "purl": "pkg:pypi/tornado@5.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@5.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33787?format=api", "purl": "pkg:pypi/tornado@5.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@5.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/33788?format=api", "purl": "pkg:pypi/tornado@5.1b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@5.1b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33789?format=api", "purl": "pkg:pypi/tornado@5.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@5.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33790?format=api", "purl": "pkg:pypi/tornado@5.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@5.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33791?format=api", "purl": "pkg:pypi/tornado@6.0a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.0a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33792?format=api", "purl": "pkg:pypi/tornado@6.0b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.0b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33793?format=api", "purl": "pkg:pypi/tornado@6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/33794?format=api", "purl": "pkg:pypi/tornado@6.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33795?format=api", "purl": "pkg:pypi/tornado@6.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/33796?format=api", "purl": "pkg:pypi/tornado@6.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/33797?format=api", "purl": "pkg:pypi/tornado@6.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/33798?format=api", "purl": "pkg:pypi/tornado@6.1b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.1b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33799?format=api", "purl": "pkg:pypi/tornado@6.1b2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.1b2" }, { "url": "http://public2.vulnerablecode.io/api/packages/33800?format=api", "purl": "pkg:pypi/tornado@6.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33801?format=api", "purl": "pkg:pypi/tornado@6.2b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.2b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33802?format=api", "purl": "pkg:pypi/tornado@6.2b2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.2b2" }, { "url": "http://public2.vulnerablecode.io/api/packages/33803?format=api", "purl": "pkg:pypi/tornado@6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/33804?format=api", "purl": "pkg:pypi/tornado@6.3b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.3b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33805?format=api", "purl": "pkg:pypi/tornado@6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/33806?format=api", "purl": "pkg:pypi/tornado@6.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" }, { "vulnerability": "VCID-a4ry-gnvn-e3a1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/33807?format=api", "purl": "pkg:pypi/tornado@6.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.3.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/48582?format=api", "purl": "pkg:pypi/tornado@6.3.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.3.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/48583?format=api", "purl": "pkg:pypi/tornado@6.4b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.4b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/48584?format=api", "purl": "pkg:pypi/tornado@6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/48585?format=api", "purl": "pkg:pypi/tornado@6.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/48586?format=api", "purl": "pkg:pypi/tornado@6.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.4.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/48587?format=api", "purl": "pkg:pypi/tornado@6.5b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.5b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/48588?format=api", "purl": "pkg:pypi/tornado@6.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/48589?format=api", "purl": "pkg:pypi/tornado@6.5.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.5.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/48590?format=api", "purl": "pkg:pypi/tornado@6.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.5.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/48591?format=api", "purl": "pkg:pypi/tornado@6.5.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.5.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/48592?format=api", "purl": "pkg:pypi/tornado@6.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-96r3-89by-dyer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@6.5.4" } ], "references": [ { "reference_url": "https://github.com/tornadoweb/tornado/security/advisories/GHSA-qjxf-f2mg-c6mc", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://github.com/tornadoweb/tornado/security/advisories/GHSA-qjxf-f2mg-c6mc" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2026/04/msg00000.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://lists.debian.org/debian-lts-announce/2026/04/msg00000.html" } ], "weaknesses": [], "exploits": [], "severity_range_score": "7.5 - 7.5", "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-96r3-89by-dyer" }