python-tornado6 vulnerabilities (openSUSE)
13 vulnerabilities.
-
python-tornado6openSUSE Tornado before 6.5.8 Memory Amplification DoS via multipart 8.7 High -
python-tornado6openSUSE Tornado before 6.5.8 Cookie Attribute Injection via Capitalized kwargs 6.3 Medium -
python-tornado6openSUSE Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop 7.5 High -
python-tornado6openSUSE tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb) 7.5 High -
python-tornado6openSUSE Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient 7.7 High -
python-tornado6openSUSE Tornado: Out-of-bounds memory access in C extension 5.3 Medium -
python-tornado6openSUSE Tornado has a DoS due to too many multipart parts 8.7 High -
python-tornado6openSUSE Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters 7.5 High -
python-tornado6openSUSE Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing 7.5 High -
python-tornado6openSUSE Tornado vulnerable to Header Injection and XSS via reason argument 5.4 Medium -
python-tornado6openSUSE Tornado vulnerable to excessive logging caused by malformed multipart form data 7.5 High -
python-tornado6openSUSE Tornado has HTTP cookie parsing DoS vulnerability 7.5 High -
python-tornado6openSUSE Open redirect in Tornado 6.1 Medium