Tornadoweb

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 26
    Known Exploited: 0
    0
    Critical Level Threats
    13
    High Level Threats
    13
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-116578

    Tornado: Open redirect in RedirectHandler via protocol-relative URLs

    Last Modified: Oct 30, 2026
    Published: Oct 26, 2026

    CVE-2026-116577

    Tornado: Quadratic CPU usage when parsing HTTP headers with line folding

    Last Modified: Oct 31, 2026
    Published: Oct 26, 2026

    CVE-2026-115927

    Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks

    Last Modified: Oct 27, 2026
    Published: Oct 26, 2026

    CVE-2026-103263

    Tornado before 6.5.9 StaticFileHandler Path Traversal via Symlink

    Last Modified: Oct 01, 2026
    Published: Oct 01, 2026

    CVE-2026-103261

    Tornado before 6.5.9 Denial of Service via Query String

    Last Modified: Oct 01, 2026
    Published: Oct 01, 2026
    Items Per Page