CVE-2023-54397
1 advisory.
PyPI/tornado CVE-2023-54397: medium, EPSS 0.38%
Tornado vulnerable to HTTP request smuggling via improper parsing of `Content-Length` fields and chunk lengths
Action: Upgrade tornado to 6.3.3 or later.
pip install tornado==6.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.3.3 | - |
Fixed versions
| 6.3.3 |
Sources
- osv: GHSA-qppv-j76h-2rpx
- https://github.com/tornadoweb/tornado/security/advisories/GHSA-qppv-j76h-2rpx
- https://github.com/tornadoweb/tornado/commit/b7a5dd29bb02950303ae96055082c12a1ea0a4fe
- https://github.com/tornadoweb/tornado
CVE-2023-54397 · published · modified · JSON