Alpine/py3-tornado: medium 6.1
Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, the supplied reason phrase is used unescaped in HTTP headers (where it could be used for header inje
Action: Upgrade py3-tornado to 6.5.4-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.5.4-r0 | - |
Fixed versions
| 6.5.4-r0 |
Sources
- osv: ALPINE-CVE-2025-67724#Alpine:v3.24/py3-tornado
- https://security.alpinelinux.org/vuln/CVE-2025-67724
published · modified · JSON