Workflow

Tornado

Latest version: v6.4.2

The latest version of tornado with no known security vulnerabilities is 6.4.2. We recommend installing version 6.4.2.

The information on this page was curated by experts in our Cybersecurity Intelligence Team.

Latest release
v6.4.2 at Nov. 22, 2024
License
Apache-2.0 (Apache License 2.0)

Description

Tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed.

Resources

Vulnerabilities (8)

See all vulnerabilities
CVE-2024-52804
Affected versions:

<6.4.2

Tornado web framework affected versions contain a performance …
PVE-2024-71956
Affected versions:

<6.4.1

Tornado’s curl_httpclient.CurlAsyncHTTPClient class is vulnera…
PVE-2024-71957
Affected versions:

<=6.4.0

When Tornado receives a request with two Transfer-Encoding: ch…
PVE-2023-99925
Affected versions:

<6.3.3

Summary: Tornado's interpretation of symbols `-`, `+`, and `_`…
CVE-2023-28370
Affected versions:

<6.3.2

Tornado 6.3.2 includes a fix for CVE-2023-28370: Open redirect…
PVE-2023-99976
Affected versions:

>=3.1.0,<4.2.1

The versions of Tornado from v3.1.0 to v4.2.0 contain a path t…

Versions (74)

See all versions

Has known vulnerabilities

  • 6.4.2
  • 6.4.1
  • 6.4
  • 6.4b1
  • 6.3.3
  • 6.3.2
  • 6.3.1
  • 6.3
  • 6.3b1
  • 6.2
  • 6.2b2
  • 6.2b1
  • 6.1
  • 6.1b2
  • 6.1b1
  • 6.0.4
  • 6.0.3
  • 6.0.2
  • 6.0.1
  • 6.0