PVE-2024-71956

Advisory

Tornado’s curl_httpclient.CurlAsyncHTTPClient class is vulnerable to CRLF (carriage retur…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed * feat(models): add support for anthropic 3.5 sonnet by marcklingen in ht…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://github.com/advisories/GHSA-w235-7p84-xx57
• https://github.com/tornadoweb/tornado/commit/7786f09f84c9f3f2012c4cf3878417cb9f053669
• https://pypi.org/project/tornado
• https://data.safetycli.com/changelogs/tornado/