py3-tornado vulnerabilities (Alpaquita)
17 vulnerabilities.
py3-tornadoAlpaquitaTornado before 6.5.9 StaticFileHandler Path Traversal via Symlink8.2 Highpy3-tornadoAlpaquitaTornado before 6.5.9 Denial of Service via CurlAsyncHTTPClient8.7 Highpy3-tornadoAlpaquitaTornado before 6.5.9 Denial of Service via Query String6.9 Mediumpy3-tornadoAlpaquitaTornado before 6.5.8 Memory Amplification DoS via multipart8.7 Highpy3-tornadoAlpaquitaTornado before 6.5.8 Cookie Attribute Injection via Capitalized kwargs6.3 Mediumpy3-tornadoAlpaquitaTornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop7.5 Highpy3-tornadoAlpaquitaTornado before 6.5.7 Credential Leak via Handle Reuse8.2 Highpy3-tornadoAlpaquitatornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)7.5 Highpy3-tornadoAlpaquitaTornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient7.7 Highpy3-tornadoAlpaquitaTornado: Out-of-bounds memory access in C extension5.3 Mediumpy3-tornadoAlpaquitaTornado has incomplete validation of cookie attributes7.2 Highpy3-tornadoAlpaquitaTornado has a DoS due to too many multipart parts8.7 Highpy3-tornadoAlpaquitaTornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters7.5 Highpy3-tornadoAlpaquitaTornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing7.5 Highpy3-tornadoAlpaquitaTornado vulnerable to Header Injection and XSS via reason argument5.4 Mediumpy3-tornadoAlpaquitaTornado has HTTP cookie parsing DoS vulnerability7.5 Highpy3-tornadoAlpaquitaQuadratic complexity parsing cookies with backslashes7.5 High