Skip to content
OpenAdvisories

Package · Debian

python-tornado

27 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.1
    CVE-2026-116578

    Tornado: Open redirect in RedirectHandler via protocol-relative URLs

    Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, tornado.web.RedirectHandler URL templates can place regex-capture substitutions where crafted request paths change the redirect scheme or network location. Affected placement…

    tornadoweb tornado python-tornado tornado Debian Ubuntu PyPI