Search for packages
Package details: pkg:deb/debian/python-tornado@4.4.3-1
purl pkg:deb/debian/python-tornado@4.4.3-1
Next non-vulnerable version 6.2.0-3+deb12u2
Latest non-vulnerable version 6.4.2-3
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-1ucn-3yzf-73c1
Aliases:
CVE-2024-52804
GHSA-8w49-h785-mj3c
Tornado has an HTTP cookie parsing DoS vulnerability
6.2.0-3+deb12u1
Affected by 1 other vulnerability.
6.4.2-1
Affected by 0 other vulnerabilities.
VCID-9bab-qq7f-aaah
Aliases:
CVE-2023-28370
GHSA-hj3f-6gcp-jg8j
PYSEC-2023-75
Open redirect in Tornado
6.2.0-3+deb12u1
Affected by 1 other vulnerability.
6.3.2-1
Affected by 0 other vulnerabilities.
6.4.0-1
Affected by 0 other vulnerabilities.
6.4.1-2
Affected by 0 other vulnerabilities.
6.4.1-3
Affected by 0 other vulnerabilities.
6.4.2-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-04-13T02:44:47.633382+00:00 Debian Oval Importer Affected by VCID-9bab-qq7f-aaah https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-13T02:42:12.401075+00:00 Debian Oval Importer Affected by VCID-1ucn-3yzf-73c1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0