Debian/python-tornado: medium 6.1
Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, the supplied reason phrase is used unescaped in HTTP headers (where it could be used for header inje
Action: Upgrade python-tornado to 6.4.2-3+deb13u2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.2-3+deb13u2 | - |
Fixed versions
| 6.4.2-3+deb13u2 |
Sources
- osv: DEBIAN-CVE-2025-67724#Debian:13/python-tornado
- https://security-tracker.debian.org/tracker/CVE-2025-67724
published · modified · JSON