{"id":"CVE-2023-28370","aliases":["ALSA-2023:6523","AZL-43486","AZL-44277","CLSA-2026-1786433207","CLSA-2026-1786442009","DEBIAN-CVE-2023-28370","DLA-4007-1","EUVD-2023-0248","GHSA-hj3f-6gcp-jg8j","MGASA-2023-0211","OESA-2023-1370","PYSEC-2023-75","RHSA-2023:6523","ROOT-APP-PYPI-CVE-2023-28370","SUSE-EL-9-CLIENT-TOOLS-2023-3137","SUSE-SU-2023:2770-1","SUSE-SU-2023:2807-1","SUSE-SU-2023:3122-1","SUSE-SU-2023:3123-1","SUSE-SU-2023:3128-1","SUSE-SU-2023:3131-1","SUSE-SU-2023:3137-1","SUSE-SU-2023:3139-1","SUSE-SU-2023:3142-1","SUSE-SU-2023:3143-1","SUSE-SU-2023:3144-1","SUSE-SU-2023:3145-1","UBUNTU-CVE-2023-28370","USN-6159-1","USN-7150-1","openSUSE-SU-2024:13107-1","openSUSE-SU-2024:13121-1","openSUSE-SU-2026:11239-1"],"status":"published","title":"Open redirect in Tornado","description":"Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01142,"percentile":0.66938,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-601"],"published":"2023-05-25T00:00:00Z","modified":"2026-10-29T11:31:34Z","fixes":[{"ecosystem":"PyPI","package":"tornado","fixed_in":["6.3.2"],"sources":["ghsa","osv"]},{"ecosystem":"AlmaLinux:9","package":"python3-tornado","fixed_in":["6.1.0-9.el9"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"python-tornado","fixed_in":["6.3.3-11"],"sources":["osv"]},{"ecosystem":"TuxCare:PyPI","package":"tornado","fixed_in":["5.1.1.post2+tuxcare","6.1.0.post6+tuxcare"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"python-tornado","fixed_in":["6.2.0-3+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python-tornado","fixed_in":["6.3.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python-tornado","fixed_in":["6.3.2-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"python-tornado","fixed_in":["6.1-1.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"python-tornado","fixed_in":["5.0.2-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"python-tornado","fixed_in":["5.0.2-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"python-tornado","fixed_in":["6.1-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"python-tornado","fixed_in":["6.1-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python-tornado","fixed_in":["0:6.1.0-9.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python-tornado-debugsource","fixed_in":["0:6.1.0-9.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-tornado","fixed_in":["0:6.1.0-9.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-tornado-debuginfo","fixed_in":["0:6.1.0-9.el9"],"sources":["osv"]},{"ecosystem":"Root:PyPI","package":"tornado","fixed_in":["6.2+aikido.10","6.2+aikido.6","6.2+aikido.7","6.2+aikido.8","6.2+aikido.9","6.2+aikido.11","6.2+aikido.12"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","fixed_in":["3006.0-1.19.2"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-tornado","fixed_in":["4.4.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"python-tornado","fixed_in":["4.4.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-tornado","fixed_in":["4.4.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"python-tornado","fixed_in":["4.5.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-tornado","fixed_in":["4.5.3-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"kiwi-desc-saltboot","fixed_in":["0.1.1687520761.cefb248-1.35.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"prometheus-blackbox_exporter","fixed_in":["0.24.0-1.20.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"python-tornado","fixed_in":["4.2.1-17.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"spacecmd","fixed_in":["4.3.22-38.124.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","package":"python-tornado","fixed_in":["4.2.1-17.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"salt","fixed_in":["3006.0-150100.100.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"salt","fixed_in":["3006.0-150100.100.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"salt","fixed_in":["3006.0-150100.100.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"venv-salt-minion","fixed_in":["3006.0-3.33.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"salt","fixed_in":["3006.0-150200.101.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"salt","fixed_in":["3006.0-150200.101.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"salt","fixed_in":["3006.0-150200.101.2"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"salt","fixed_in":["3006.0-150200.101.2"],"sources":["osv"]},{"ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-psutil","fixed_in":["5.8.0-1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"venv-salt-minion","fixed_in":["3006.0-1.19.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"salt","fixed_in":["3006.0-150500.4.12.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"salt","fixed_in":["3006.0-150500.4.12.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP5","package":"salt","fixed_in":["3006.0-150500.4.12.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"salt","fixed_in":["3006.0-150500.4.12.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"venv-salt-minion","fixed_in":["3006.0-150000.3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"venv-salt-minion","fixed_in":["3006.0-150000.3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy Module 4.3","package":"venv-salt-minion","fixed_in":["3006.0-150000.3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"venv-salt-minion","fixed_in":["3006.0-150000.3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"salt","fixed_in":["3006.0-150300.53.53.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"salt","fixed_in":["3006.0-150300.53.53.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"salt","fixed_in":["3006.0-150300.53.53.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"salt","fixed_in":["3006.0-150300.53.53.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"salt","fixed_in":["3006.0-150300.53.53.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"salt","fixed_in":["3006.0-150300.53.53.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"salt","fixed_in":["3006.0-150300.53.53.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"salt","fixed_in":["3006.0-150300.53.53.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"salt","fixed_in":["3006.0-150300.53.53.2"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"salt","fixed_in":["3006.0-150300.53.53.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"prometheus-blackbox_exporter","fixed_in":["0.24.0-150000.1.20.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"spacecmd","fixed_in":["4.3.22-150000.3.101.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"system-user-prometheus","fixed_in":["1.0.0-150000.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"prometheus-blackbox_exporter","fixed_in":["0.24.0-150000.1.20.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"system-user-prometheus","fixed_in":["1.0.0-150000.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy Module 4.2","package":"prometheus-blackbox_exporter","fixed_in":["0.24.0-150000.1.20.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy Module 4.2","package":"system-user-prometheus","fixed_in":["1.0.0-150000.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy Module 4.3","package":"prometheus-blackbox_exporter","fixed_in":["0.24.0-150000.1.20.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy Module 4.3","package":"system-user-prometheus","fixed_in":["1.0.0-150000.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"system-user-prometheus","fixed_in":["1.0.0-150000.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"system-user-prometheus","fixed_in":["1.0.0-150000.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"prometheus-blackbox_exporter","fixed_in":["0.24.0-150000.1.20.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"spacecmd","fixed_in":["4.3.22-150000.3.101.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"system-user-prometheus","fixed_in":["1.0.0-150000.10.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"prometheus-blackbox_exporter","fixed_in":["0.24.0-150000.1.20.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"python-tornado","fixed_in":["4.5.3-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"spacecmd","fixed_in":["4.3.22-150000.3.101.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"system-user-prometheus","fixed_in":["1.0.0-150000.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"salt","fixed_in":["3006.0-150400.8.37.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"salt","fixed_in":["3006.0-150400.8.37.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"salt","fixed_in":["3006.0-150400.8.37.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"salt","fixed_in":["3006.0-150400.8.37.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP4","package":"salt","fixed_in":["3006.0-150400.8.37.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"salt","fixed_in":["3006.0-150400.8.37.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"salt","fixed_in":["3006.0-150400.8.37.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"salt","fixed_in":["3006.0-150400.8.37.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-tornado","fixed_in":["4.2.1-1ubuntu3.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-tornado","fixed_in":["4.5.3-1ubuntu0.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python-tornado","fixed_in":["6.0.3+really5.1.1-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python-tornado","fixed_in":["6.1.0-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"python-tornado6","fixed_in":["6.5.7-2.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-9.el9"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.2.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.3-11"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1"},{"fixed":"5.1.1.post2+tuxcare"}]}],"versions":["5.1.1","5.1.1.post1+tuxcare"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1"},{"fixed":"6.1.0.post6+tuxcare"}]}],"versions":["6.1","6.1.0.post1+tuxcare","6.1.0.post2+tuxcare","6.1.0.post3+tuxcare","6.1.0.post4+tuxcare","6.1.0.post5+tuxcare"]},{"source":"osv","ecosystem":"Debian:12","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-3+deb12u1"}]}],"versions":["6.2.0-3"]},{"source":"osv","ecosystem":"Debian:13","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-1+deb11u1"}]}],"versions":["6.1.0-1"],"bundled":2},{"source":"osv","ecosystem":"PyPI","package":"tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2"}]}],"versions":["0.2","1.0","1.1","1.1.1","1.2","1.2.1","2.0","2.1","2.1.1","2.2","2.2.1","2.3","2.4","2.4.1","3.0","3.0.1","3.0.2","3.1","3.1.1","3.2","3.2.1","3.2.2","4.0","4.0.1","4.0.2","4.1","4.1b2","4.2","4.2.1","4.2b1","4.3","4.3b1","4.3b2","4.4","4.4.1","4.4.2","4.4.3","4.4b1","4.5","4.5.1","4.5.2","4.5.3","4.5b1","4.5b2","5.0","5.0.1","5.0.2","5.0a1","5.0b1","5.1","5.1.1","5.1b1","6.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0a1","6.0b1","6.1","6.1b1","6.1b2","6.2","6.2b1","6.2b2","6.3","6.3.1","6.3b1"]},{"source":"osv","ecosystem":"Mageia:8","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-1.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2"}]}],"versions":["0.2","1.0","1.1","1.1.1","1.2","1.2.1","2.0","2.1","2.1.1","2.2","2.2.1","2.3","2.4","2.4.1","3.0","3.0.1","3.0.2","3.1","3.1.1","3.2","3.2.1","3.2.2","4.0","4.0.1","4.0.2","4.1","4.1b2","4.2","4.2.1","4.2b1","4.3","4.3b1","4.3b2","4.4","4.4.1","4.4.2","4.4.3","4.4b1","4.5","4.5.1","4.5.2","4.5.3","4.5b1","4.5b2","5.0","5.0.1","5.0.2","5.0a1","5.0b1","5.1","5.1.1","5.1b1","6.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0a1","6.0b1","6.1","6.1b1","6.1b2","6.2","6.2b1","6.2b2","6.3","6.3.1","6.3b1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.0-9.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python-tornado-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.0-9.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.0-9.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-tornado-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.0-9.el9"}]}]},{"source":"osv","ecosystem":"Root:PyPI","package":"tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2+aikido.10"},{"fixed":"6.2+aikido.6"},{"fixed":"6.2+aikido.7"},{"fixed":"6.2+aikido.8"},{"fixed":"6.2+aikido.9"},{"fixed":"6.2+aikido.11"},{"fixed":"6.2+aikido.12"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"kiwi-desc-saltboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1687520761.cefb248-1.35.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"prometheus-blackbox_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0-1.20.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-17.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.22-38.124.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-17.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150100.100.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150100.100.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150100.100.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-3.33.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150200.101.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150200.101.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150200.101.2"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150200.101.2"}]}]},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.19.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.12.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.53.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.53.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.53.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.53.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.53.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.53.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.53.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.53.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.53.2"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.53.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"prometheus-blackbox_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0-150000.1.20.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.22-150000.3.101.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"system-user-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"prometheus-blackbox_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0-150000.1.20.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"system-user-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"prometheus-blackbox_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0-150000.1.20.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"system-user-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"prometheus-blackbox_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0-150000.1.20.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"system-user-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"system-user-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"system-user-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"prometheus-blackbox_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0-150000.1.20.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.22-150000.3.101.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"system-user-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"prometheus-blackbox_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.0-150000.1.20.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.22-150000.3.101.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"system-user-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.37.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.37.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.37.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.37.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.37.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.37.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.37.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.37.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.16.0-1","0.16.4-2","0.17.1+dfsg-1","0.17.2-1","0.17.2-2","0.17.2-3","0.17.4-1","0.17.4-2","0.17.5-1","0.17.5+ds-1","0.17.5+ds-1ubuntu0.1~esm1","0.17.5+ds-1ubuntu0.1~esm2","0.17.5+ds-1ubuntu0.1~esm4","0.17.5+ds-1ubuntu0.1~esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1ubuntu3.1+esm1"}]}],"versions":["4.2.1-1ubuntu2","4.2.1-1ubuntu3","4.2.1-1ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2015.5.3+ds-1","2015.8.1+ds-2","2015.8.3+ds-1","2015.8.3+ds-2","2015.8.3+ds-3","2015.8.5+ds-1","2015.8.7+ds-1","2015.8.8+ds-1","2015.8.8+ds-1ubuntu0.1~esm1","2015.8.8+ds-1ubuntu0.1","2015.8.8+ds-1ubuntu0.1+esm1","2015.8.8+ds-1ubuntu0.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-1ubuntu0.2+esm1"}]}],"versions":["4.5.1-2.1~build2","4.5.2-1","4.5.3-1","4.5.3-1ubuntu0.1","4.5.3-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2016.11.5+ds-1","2016.11.8+dfsg1-1","2017.7.2+dfsg1-2ubuntu1","2017.7.3+dfsg1-1","2017.7.4+dfsg1-1","2017.7.4+dfsg1-1ubuntu18.04.1","2017.7.4+dfsg1-1ubuntu18.04.2","2017.7.4+dfsg1-1ubuntu18.04.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.3+really5.1.1-3ubuntu0.1~esm1"}]}],"versions":["5.1.1-4ubuntu1","5.1.1-4ubuntu5","6.0.3+really5.1.1-2","6.0.3+really5.1.1-2build1","6.0.3+really5.1.1-2build2","6.0.3+really5.1.1-3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3002.6+dfsg1-4","3002.7+dfsg1-1","3004+dfsg1-4","3004+dfsg1-5","3004+dfsg1-6ubuntu1","3004+dfsg1-7","3004+dfsg1-8","3004.1+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-3ubuntu0.1~esm1"}]}],"versions":["6.1.0-1build1","6.1.0-2","6.1.0-3","6.1.0-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1ubuntu3.1+esm1"}]}],"versions":["4.2.1-1ubuntu2","4.2.1-1ubuntu3","4.2.1-1ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-1ubuntu0.2+esm1"}]}],"versions":["4.5.1-2.1~build2","4.5.2-1","4.5.3-1","4.5.3-1ubuntu0.1","4.5.3-1ubuntu0.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.3+really5.1.1-3ubuntu0.1~esm1"}]}],"versions":["5.1.1-4ubuntu1","5.1.1-4ubuntu5","6.0.3+really5.1.1-2","6.0.3+really5.1.1-2build1","6.0.3+really5.1.1-2build2","6.0.3+really5.1.1-3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-3ubuntu0.1~esm1"}]}],"versions":["6.1.0-1build1","6.1.0-2","6.1.0-3","6.1.0-3build1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-1ubuntu0.1"}]}],"versions":["6.3.2-1","6.4.0-0ubuntu1","6.4.0-1","6.4.0-1build1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.7-2.1"}]}]}],"products":[{"vendor":"tornadoweb","product":"tornado"}],"references":[{"url":"https://github.com/tornadoweb/tornado/releases/tag/v6.3.2","tags":["x_transferred","Product","web","report"]},{"url":"https://jvn.jp/en/jp/JVN45127776/","tags":["x_transferred","Third Party Advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00000.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28370","tags":["web","advisory"]},{"url":"https://github.com/tornadoweb/tornado/commit/32ad07c54e607839273b4e1819c347f5c8976b2f","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tornado/PYSEC-2023-75.yaml","tags":["web"]},{"url":"https://jvn.jp/en/jp/JVN45127776","tags":["web"]},{"url":"https://github.com/advisories/GHSA-hj3f-6gcp-jg8j","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6523","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28370","tags":["report"]},{"url":"https://bugzilla.redhat.com/2210199","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6523.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/28xxx/CVE-2023-28370.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-28370","tags":["advisory"]},{"url":"https://github.com/tornadoweb/tornado","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2023-0211.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32033","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6159-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1370","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2210199","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6523.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28370","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement//suse-el-9-client-tools-2023-3137/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1210994","tags":["report"]},{"url":"https://bugzilla.suse.com/1211591","tags":["report"]},{"url":"https://bugzilla.suse.com/1211741","tags":["report"]},{"url":"https://bugzilla.suse.com/1211754","tags":["report"]},{"url":"https://bugzilla.suse.com/1212516","tags":["report"]},{"url":"https://bugzilla.suse.com/1212517","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28370","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232770-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232807-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233122-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204089","tags":["report"]},{"url":"https://bugzilla.suse.com/1208612","tags":["report"]},{"url":"https://bugzilla.suse.com/1212279","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233123-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233128-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233131-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233137-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233139-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233142-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233143-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233144-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233145-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-28370","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7150-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-52804","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-28370","description":"Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.","status":"published","published":"2023-05-25T00:00:00Z","modified":"2025-11-03T21:47:34.583Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:35:32.376766Z"}],"euvd":[{"id":"EUVD-2023-0248","description":"Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.","status":"published","published":"2023-05-25T00:00:00Z","modified":"2025-11-03T21:47:34Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:31.25882Z"}],"ghsa":[{"id":"GHSA-hj3f-6gcp-jg8j","title":"Open redirect in Tornado","description":"Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.","status":"published","published":"2023-05-25T12:30:16Z","modified":"2025-11-04T16:44:13Z","cvss":[{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","level":"medium"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:39:06.376137Z"}],"nvd":[{"id":"CVE-2023-28370","description":"Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.","status":"published","published":"2023-05-25T10:15:09.75Z","modified":"2026-06-17T05:47:34.07Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:08:03.200773Z"}],"osv":[{"id":"AZL-43486","title":"CVE-2023-28370 affecting package python-tornado 6.2.0-1","description":"Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.","status":"published","published":"2023-05-25T10:15:09Z","modified":"2026-04-21T04:31:01.013631Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44277","title":"CVE-2023-28370 affecting package python-tornado for versions less than 6.3.3-11","description":"Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.","status":"published","published":"2023-05-25T10:15:09Z","modified":"2026-04-21T04:51:58.90692Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"CVE-2023-28370","description":"Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.","status":"published","published":"2023-05-25T00:00:00Z","modified":"2026-10-28T02:30:36.531645705Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:31.468318Z"},{"id":"DEBIAN-CVE-2023-28370","description":"Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.","status":"published","published":"2023-05-25T10:15:09.75Z","modified":"2026-10-26T18:00:46.638175641Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"GHSA-hj3f-6gcp-jg8j","title":"Open redirect in Tornado","description":"Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.","status":"published","published":"2023-05-25T12:30:16Z","modified":"2025-11-04T16:49:24.962077Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"},{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T15:46:49.28217Z"},{"id":"OESA-2023-1370","title":"python-tornado security update","description":"Tornado is an open source version of the scalable, non-blocking web server and tools.\n\nSecurity Fix(es):\n\nOpen redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.(CVE-2023-28370)","status":"published","published":"2023-06-27T11:05:50Z","modified":"2026-08-18T01:17:45.230929724Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:6523","title":"Red Hat Security Advisory: python-tornado security update","status":"published","published":"2024-09-16T12:35:18Z","modified":"2025-11-22T12:59:12Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"ROOT-APP-PYPI-CVE-2023-28370","title":"CVE-2023-28370 in tornado - Patched by Root","description":"Root has patched CVE-2023-28370 in the tornado package for Root:PyPI. Multiple fixed versions available.","status":"published","published":"2026-10-12T08:34:51Z","modified":"2026-10-12T09:15:04.369628759Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:27.940619Z"},{"id":"UBUNTU-CVE-2023-28370","description":"Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.","status":"published","published":"2023-05-25T10:15:00Z","modified":"2026-04-08T14:12:33.489703Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"ALSA-2023:6523","title":"Moderate: python-tornado security update","description":"Tornado is a Python web framework and asynchronous networking library that provides an open source version of scalable, non-blocking web server and tools.\n\nSecurity Fix(es):\n\n* python-tornado: open redirect vulnerability in StaticFileHandler under certain configurations (CVE-2023-28370)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:31:34.776442416Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2026-1786433207","title":"TuxCare security update for tornado (1 CVE)","description":"TuxCare rebuilt tornado to address 1 CVE. Fixed in 5.1.1.post2+tuxcare.","status":"published","published":"2026-08-11T07:26:47Z","modified":"2026-10-15T09:48:05.298308561Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1786442009","title":"TuxCare security update for tornado (1 CVE)","description":"TuxCare rebuilt tornado to address 1 CVE. Fixed in 6.1.0.post6+tuxcare.","status":"published","published":"2026-08-11T09:53:29Z","modified":"2026-10-15T09:48:05.185978796Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"DLA-4007-1","title":"python-tornado - security update","status":"published","published":"2025-01-01T00:00:00Z","modified":"2026-03-09T02:08:47.100525Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2023-0211","title":"Updated python-tornado packages fix security vulnerability","description":"Remote unauthenticated attacker may redirect a user to an arbitrary web\nsite and conduct a phishing attack by having user access a specially\ncrafted URL. (CVE-2023-28370)\n","status":"published","published":"2023-06-28T05:21:41Z","modified":"2026-04-16T04:40:57.828769232Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:13107-1","title":"python310-tornado6-6.3.2-2.1 on GA media","description":"These are all security issues fixed in the python310-tornado6-6.3.2-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:22:02.02662Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:13121-1","title":"python3-salt-3006.0-2.1 on GA media","description":"These are all security issues fixed in the python3-salt-3006.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:47:10.235886Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2026:11239-1","title":"python313-tornado6-6.5.7-2.1 on GA media","description":"These are all security issues fixed in the python313-tornado6-6.5.7-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-09T00:00:00Z","modified":"2026-07-10T10:00:10.497996048Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"PYSEC-2023-75","description":"Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.","status":"published","published":"2023-05-25T10:15:00Z","modified":"2026-06-10T17:02:44.374946391Z","updated_at":"2026-11-02T15:52:53.837392Z"},{"id":"SUSE-EL-9-CLIENT-TOOLS-2023-3137","title":"Security update for SUSE Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- CVE-2023-28370: Tornado: Fix an open redirect issue in the static file handler (bsc#1211741)\n- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)\n- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)\n- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)\n- Avoid failures due transactional_update module not available\n  in Salt 3006.0 (bsc#1211754)\n\n","status":"published","published":"2023-08-02T07:16:39Z","modified":"2026-07-24T18:24:17.717224142Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2023:2770-1","title":"Security update for python-tornado","description":"This update for python-tornado fixes the following issues:\n\n- CVE-2023-28370: Fixed an open redirect issue in the static file\n  handler (bsc#1211741).\n","status":"published","published":"2023-07-04T07:05:03Z","modified":"2026-02-04T04:07:46.44481Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2807-1","title":"Security update for python-tornado","description":"This update for python-tornado fixes the following issues:\n\n- CVE-2023-28370: Fixed an open redirect issue in the static file\n  handler (bsc#1211741).\n","status":"published","published":"2023-07-11T11:43:55Z","modified":"2026-02-04T03:43:09.030363Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3122-1","title":"Security update for SUSE Manager Client Tools","description":"This update fixes the following issues:\n\npython-tornado:\n\n- Security fixes:\n  * CVE-2023-28370: Fixed an open redirect issue in the static file handler (bsc#1211741)\n\nkiwi-desc-saltboot:\n\n- Update to version 0.1.1687520761.cefb248\n  * Add osimage cert package to bootstrap for SUSE Linux Enterprise 12 images (bsc#1204089)\n\nprometheus-blackbox_exporter:\n\n- Use obscpio for go modules service\n- Set version number\n- Set build date from SOURCE_DATE_EPOCH\n- Update to 0.24.0 (bsc#1212279, jsc#PED-4556)\n  * Requires go1.19\n- Avoid empty validation script\n- Add rc symlink for backwards compatibility\n    \nspacecmd:\n\n- Version 4.3.22-1\n  * Bypass traditional systems check on older SUMA instances (bsc#1208612)\n\n","status":"published","published":"2023-08-02T07:11:22Z","modified":"2026-02-04T02:34:24.57537Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3123-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741)\n\nBug fixes:\n\n- Prevent error loading 'known_hosts' when '$HOME' is not set. (bsc#1210994)\n- Fix ModuleNotFoundError and other issues raised by salt-support module. (bsc#1211591)\n","status":"published","published":"2023-08-02T07:11:49Z","modified":"2026-02-04T03:28:03.193102Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3128-1","title":"Security update for SUSE Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security fixes:\n  * CVE-2023-28370: Tornado: Fix an open redirect in StaticFileHandler (bsc#1211741)\n- Bug fixes:\n  * Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)\n  * Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)\n  * Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)\n  * Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)\n\n","status":"published","published":"2023-08-02T07:12:44Z","modified":"2026-02-04T04:26:47.603511Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3131-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741)\n\nBug fixes:\n\n- Prevent error loading 'known_hosts' when '$HOME' is not set (bsc#1210994)\n- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)\n","status":"published","published":"2023-08-02T07:13:35Z","modified":"2026-02-04T02:44:56.527672Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3137-1","title":"Security update for SUSE Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- CVE-2023-28370: Tornado: Fix an open redirect issue in the static file handler (bsc#1211741)\n- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)\n- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)\n- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)\n- Avoid failures due transactional_update module not available\n  in Salt 3006.0 (bsc#1211754)\n\n","status":"published","published":"2023-08-02T07:16:39Z","modified":"2026-02-04T04:21:20.874157Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3139-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741)\n\nBug fixes:\n\n- Prevent error loading 'known_hosts' when '$HOME' is not set (bsc#1210994)\n- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)\n","status":"published","published":"2023-08-02T07:17:19Z","modified":"2026-02-04T02:48:14.24963Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3142-1","title":"Security update for SUSE Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security fixes:\n  * CVE-2023-28370: Tornado: Fix an open redirect in StaticFileHandler (bsc#1211741)\n- Bug fixes:\n  * Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)\n  * Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)\n  * Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)\n\n","status":"published","published":"2023-08-02T07:18:57Z","modified":"2026-02-04T04:31:49.984214Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3143-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741)\n\nBug fixes:\n\n- Prevent error loading 'known_hosts' when '$HOME' is not set (bsc#1210994)\n- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)\n","status":"published","published":"2023-08-02T07:20:17Z","modified":"2026-02-04T03:19:38.442254Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3144-1","title":"Security update for SUSE Manager Client Tools","description":"This update fixes the following issues:\n\npython-tornado:\n    \n- Security fixes:\n  * CVE-2023-28370: Fixed an open redirect issue in the static file handler (bsc#1211741)\n\nprometheus-blackbox_exporter:\n\n- Use obscpio for go modules service\n- Set version number\n- Set build date from SOURCE_DATE_EPOCH\n- Update to 0.24.0 (bsc#1212279, jsc#PED-4556)\n  * Requires go1.19\n- Avoid empty validation script\n- Add rc symlink for backwards compatibility\n\nspacecmd:\n\n- Version 4.3.22-1\n  * Bypass traditional systems check on older SUMA instances (bsc#1208612)\n\n","status":"published","published":"2023-08-02T07:29:16Z","modified":"2026-02-04T03:11:03.158026Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3145-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741)\n\nBug fixes:\n\n- Prevent error loading 'known_hosts' when '$HOME' is not set (bsc#1210994)\n- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)\n","status":"published","published":"2023-08-02T07:34:03Z","modified":"2026-02-04T02:50:34.962618Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"USN-6159-1","title":"python-tornado vulnerability","description":"It was discovered that Tornado incorrectly handled certain redirect.\nAn remote attacker could possibly use this issue to redirect a user to an\narbitrary web site and conduct a phishing attack by having user access a\nspecially crafted URL.\n","status":"published","published":"2023-06-13T14:58:12Z","modified":"2026-06-25T13:32:07.060326564Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-7150-1","title":"python-tornado vulnerabilities","description":"It was discovered that Tornado incorrectly handled a certain redirect.\nA remote attacker could possibly use this issue to redirect a user to an\narbitrary web site and conduct a phishing attack by having the user access\na specially crafted URL. This issue was only addressed in Ubuntu 22.04 LTS,\nUbuntu 20.04 LTS, and Ubuntu 18.04 LTS. Ubuntu 16.04 LTS was previously\naddressed in USN-6159-1. (CVE-2023-28370)\n\nIt was discovered that Tornado inefficiently handled requests when parsing\ncookies. An attacker could possibly use this issue to increase resource\nutilization leading to a denial of service. (CVE-2024-52804)\n","status":"published","published":"2024-12-11T15:04:47Z","modified":"2026-04-27T17:36:25.525801Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}