CVE-2024-14029
1 advisory.
PyPI/tornado CVE-2024-14029: medium 5.3
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in tornado
Action: Upgrade tornado to 6.4.1 or later.
pip install tornado==6.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.1 | - |
Fixed versions
| 6.4.1 |
Sources
- osv: GHSA-753j-mpmx-qq6g
- https://github.com/tornadoweb/tornado/security/advisories/GHSA-753j-mpmx-qq6g
- https://github.com/tornadoweb/tornado/commit/d65f6e71a77f53a1ff0a0dc55704be13f04eb572
- https://github.com/tornadoweb/tornado
CVE-2024-14029 · published · modified · JSON