CVE-2024-58384
1 advisory.
PyPI/tornado CVE-2024-58384: medium 6.5, EPSS 0.25%
Tornado has a CRLF injection in CurlAsyncHTTPClient headers
Action: Upgrade tornado to 6.4.1 or later.
pip install tornado==6.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.1 | - |
Fixed versions
| 6.4.1 |
Sources
- osv: GHSA-w235-7p84-xx57
- https://github.com/tornadoweb/tornado/security/advisories/GHSA-w235-7p84-xx57
- https://github.com/tornadoweb/tornado/commit/7786f09f84c9f3f2012c4cf3878417cb9f053669
- https://github.com/tornadoweb/tornado
CVE-2024-58384 · published · modified · JSON