Vulnerability Database

GHSA-fqwm-6jpj-5wxc

PyPI/tornado

Tornado has cookie attribute injection via .RequestHandler.set_cookie 03 Apr

Fix available
Severity - 7.2 (High)

CLEANSTART-2026-UK29776

CleanStart/airflow-2
CleanStart/airflow-3

Security fix for ghsa-fqwm-6jpj-5wxc applied in: airflow-2 2.10.3-r2, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0 18 Sep

Fix available

ECHO-b644-e810-f4a8

Echo:PyPI/tornado

See record for full details 07 May

Fix available

MINI-7ww7-6x72-cv94

MinimOS/litellm-1.81

See record for full details 29 Apr

Fix available

MINI-6hhg-95c4-rj6f

MinimOS/litellm-1.80

See record for full details 29 Apr

Fix available

MINI-6336-36xr-j48w

MinimOS/airflow-3
MinimOS/airflow-3-advanced-compat
MinimOS/airflow-3-compat

See record for full details 08 Apr

Fix available

MINI-rh7h-2gg8-h9fr

MinimOS/airflow-2
MinimOS/airflow-2-advanced-compat
MinimOS/airflow-2-compat

See record for full details 05 Apr

Fix available

CGA-hxv9-343f-w56p

Chainguard/mitmproxy
Wolfi/mitmproxy

See record for full details 04 Apr

Fix available
Severity - 7.2 (High)

CGA-86hh-v9p4-xm88

Chainguard/mitmproxy
Wolfi/mitmproxy

See record for full details 04 Apr

Fix available
Severity - 7.2 (High)

PYSEC-2026-2287

PyPI/tornado

See record for full details 03 Apr

Fix available
Severity - 5.3 (Medium)

CVE-2026-35536

github.com/tornadoweb/tornado

See record for full details 03 Apr

Fix available
Severity - 7.2 (High)

GHSA-78cv-mqj4-43f7

PyPI/tornado

Tornado has incomplete validation of cookie attributes 11 Mar

Fix available
Severity - 5.4 (Medium)

Vulnerabilities