This update for python-tornado6 fixes the following issue
CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously
stall the single-threaded event loop and delay every connection (bsc#1277725).