Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 11 | python-tornado | 6.1.0-1+deb11u2 |
Vulnerabilities 1
-
High 7.5
Tornado vulnerable to excessive logging caused by malformed multipart form data
Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate…