Search for packages
| purl | pkg:deb/debian/python-tornado@5.1.1-4 |
| Next non-vulnerable version | 6.2.0-3+deb12u2 |
| Latest non-vulnerable version | 6.4.2-3 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1ucn-3yzf-73c1
Aliases: CVE-2024-52804 GHSA-8w49-h785-mj3c |
Tornado has an HTTP cookie parsing DoS vulnerability |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-9bab-qq7f-aaah
Aliases: CVE-2023-28370 GHSA-hj3f-6gcp-jg8j PYSEC-2023-75 |
Open redirect in Tornado |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-22T16:52:09.666698+00:00 | Debian Importer | Affected by | VCID-9bab-qq7f-aaah | None | 36.1.3 |
| 2025-06-21T01:34:40.099731+00:00 | Debian Importer | Affected by | VCID-9bab-qq7f-aaah | https://security-tracker.debian.org/tracker/data/json | 36.1.3 |
| 2025-04-13T02:44:47.638262+00:00 | Debian Oval Importer | Affected by | VCID-9bab-qq7f-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-13T02:42:12.406624+00:00 | Debian Oval Importer | Affected by | VCID-1ucn-3yzf-73c1 | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-06T09:49:01.696869+00:00 | Debian Importer | Affected by | VCID-9bab-qq7f-aaah | None | 36.0.0 |
| 2025-04-04T04:19:10.012576+00:00 | Debian Importer | Affected by | VCID-9bab-qq7f-aaah | https://security-tracker.debian.org/tracker/data/json | 36.0.0 |
| 2025-02-21T10:29:20.136608+00:00 | Debian Importer | Affected by | VCID-9bab-qq7f-aaah | None | 35.1.0 |
| 2025-02-21T10:29:16.747960+00:00 | Debian Importer | Affected by | VCID-9bab-qq7f-aaah | https://security-tracker.debian.org/tracker/data/json | 35.1.0 |
| 2024-04-26T02:37:47.803443+00:00 | Debian Importer | Affected by | VCID-9bab-qq7f-aaah | None | 34.0.0rc4 |
| 2024-04-26T02:37:47.018069+00:00 | Debian Importer | Affected by | VCID-9bab-qq7f-aaah | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc4 |
| 2024-01-12T12:39:04.964690+00:00 | Debian Importer | Affected by | VCID-9bab-qq7f-aaah | None | 34.0.0rc2 |
| 2024-01-12T12:39:03.587310+00:00 | Debian Importer | Affected by | VCID-9bab-qq7f-aaah | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc2 |
| 2024-01-05T08:24:56.806427+00:00 | Debian Importer | Affected by | VCID-9bab-qq7f-aaah | None | 34.0.0rc1 |
| 2024-01-05T08:24:55.868858+00:00 | Debian Importer | Affected by | VCID-9bab-qq7f-aaah | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc1 |