Vulnerability Database - OSV

GHSA-8w49-h785-mj3c

PyPI/tornado

Tornado has an HTTP cookie parsing DoS vulnerability 22 Nov 2024

Fix available
Severity - 7.5 (High)

CLEANSTART-2026-SW42898

CleanStart/airflow-2

Security fix for ghsa-8w49-h785-mj3c applied in: airflow-2 2.10.3-r2 18 Sep

Fix available

ECHO-d90e-6b66-657c

Echo:PyPI/tornado

See record for full details 12 Aug

Fix available

PYSEC-2026-1975

PyPI/tornado

Tornado has an HTTP cookie parsing DoS vulnerability 07 Jul

Fix available
Severity - 7.5 (High)

CGA-c3ph-j659-c482

Chainguard/airflow-bitnami-compat
Wolfi/airflow-bitnami-compat

See record for full details 04 Nov 2025

Fix available
Severity - 7.5 (High)

CGA-xprw-mwpg-g2hw

Chainguard/airflow-bitnami-compat
Wolfi/airflow-bitnami-compat

See record for full details 04 Nov 2025

Fix available
Severity - 7.5 (High)

CGA-gphx-j3vr-h286

Chainguard/py3-tornado
Wolfi/py3-tornado

See record for full details 30 Oct 2025

Fix available
Severity - 7.5 (High)

CGA-76pg-846p-c9h8

Chainguard/py3-tornado
Wolfi/py3-tornado

See record for full details 30 Oct 2025

Fix available
Severity - 7.5 (High)

CGA-8xv8-p6c2-79c9

Chainguard/dask-gateway-server
Wolfi/dask-gateway-server

See record for full details 30 Oct 2025

Fix available
Severity - 7.5 (High)

CGA-f332-j5qc-q4hw

Chainguard/dask-gateway
Wolfi/dask-gateway

See record for full details 30 Oct 2025

Fix available
Severity - 7.5 (High)

CGA-v7g8-mcff-j87m

Chainguard/dask-gateway
Wolfi/dask-gateway

See record for full details 30 Oct 2025

Fix available
Severity - 7.5 (High)

CGA-r9v4-xhwr-jcwc

Chainguard/dask-gateway-server
Wolfi/dask-gateway-server

See record for full details 30 Oct 2025

Fix available
Severity - 7.5 (High)

CGA-6mf9-rh78-8mr3

Chainguard/airflow
Wolfi/airflow

See record for full details 30 Oct 2025

Fix available
Severity - 7.5 (High)

CGA-jv73-7988-wqmv

Chainguard/airflow
Wolfi/airflow

See record for full details 30 Oct 2025

Fix available
Severity - 7.5 (High)

CGA-m6rq-pf4j-2xqq

Chainguard/kubeflow-pipelines-visualization-server
Wolfi/kubeflow-pipelines-visualization-server

See record for full details 30 Oct 2025

Fix available
Severity - 7.5 (High)

CVE-2024-52804

github.com/tornadoweb/tornado

Tornado has HTTP cookie parsing DoS vulnerability 22 Nov 2024

Fix available
Severity - 7.5 (High)