GCVE-VVD-MAGEIA-2026-92

Advisory Published

Vulnetix · Advisory published April 10, 2026

Tornado vulnerable to Header Injection and XSS via reason argument. (CVE-2025-67724) Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing. (CVE-2025-67725) Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters. (CVE-2025-67726)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	python-tornado	0 (affected), 6.3.2-1.3.mga9 (unaffected)	—

References

Updated python-tornado packages fix security vulnerabilities

advisory

Updated python-tornado packages fix security vulnerabilities

issue

Updated python-tornado packages fix security vulnerabilities

issue

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON