python-tornado-debugsource vulnerabilities (Red Hat)
27 vulnerabilities.
-
python-tornado-debugsourceRed Hat Tornado before 6.5.9 Denial of Service via CurlAsyncHTTPClient 8.7 High -
python-tornado-debugsourceRed Hat Tornado before 6.5.8 Memory Amplification DoS via multipart 8.7 High -
python-tornado-debugsourceRed Hat Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop 7.5 High -
python-tornado-debugsourceRed Hat tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb) 7.5 High -
python-tornado-debugsourceRed Hat Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient 7.7 High -
python-tornado-debugsourceRed Hat Tornado has incomplete validation of cookie attributes 7.2 High -
python-tornado-debugsourceRed Hat Tornado has a DoS due to too many multipart parts 8.7 High -
python-tornado-debugsourceRed Hat Tornado vulnerable to excessive logging caused by malformed multipart form data 7.5 High -
python-tornado-debugsourceRed Hat Tornado has HTTP cookie parsing DoS vulnerability 7.5 High -
python-tornado-debugsourceRed Hat Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding 9.0 Critical -
python-tornado-debugsourceRed Hat Cri-o: security regression of cve-2022-27652 4.8 Medium -
python-tornado-debugsourceRed Hat Open redirect in Tornado 6.1 Medium -
python-tornado-debugsourceRed Hat Unauthorized read of Custom Resources 6.5 Medium -
python-tornado-debugsourceRed Hat Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the... 7.4 High -
python-tornado-debugsourceRed Hat Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF) 5.1 Medium -
python-tornado-debugsourceRed Hat Incorrect sanitization of forwarded query parameters in net/http/httputil 7.5 High -
python-tornado-debugsourceRed Hat Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
python-tornado-debugsourceRed Hat Unbounded memory consumption when reading headers in archive/tar 7.5 High -
python-tornado-debugsourceRed Hat CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure 7.1 High -
python-tornado-debugsourceRed Hat Failure to strip relative path components in net/url 7.5 High -
python-tornado-debugsourceRed Hat golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
python-tornado-debugsourceRed Hat python-scciclient vulnerable to Man-in-the-middle (MITM) attacks 7.4 High -
python-tornado-debugsourceRed Hat Panic when decoding Float and Rat types in math/big 7.5 High -
python-tornado-debugsourceRed Hat Exposure of client IP addresses in net/http 6.5 Medium -
python-tornado-debugsourceRed Hat Stack exhaustion when reading certain archives in compress/gzip 7.5 High -
python-tornado-debugsourceRed Hat Improper sanitization of Transfer-Encoding headers in net/http 6.5 Medium -
python-tornado-debugsourceRed Hat Denial of service in gopkg.in/yaml.v2 5.5 Medium