{"action":"Upgrade tornado to 2.2.1 or later.","affected":[{"fixed":"2.2.1","introduced":"0"}],"component":"tornado","cve_ids":["CVE-2012-2374"],"ecosystem":"PyPI","epss":0.01358,"exploited":false,"fixed_versions":["2.2.1"],"ghsa_id":"GHSA-f7fv-v9rh-prvc","id":"tcs_01M5KFEQ2X9RXBNFSHW3YBQC3C","modified_at":"2024-11-18T22:24:23.207635Z","published_at":"2022-05-17T05:23:55Z","references":["https://osv.dev/vulnerability/GHSA-f7fv-v9rh-prvc","https://nvd.nist.gov/vuln/detail/CVE-2012-2374","https://github.com/tornadoweb/tornado/commit/1ae91f6d58e6257e0ab49d295d8741ce1727bdb7","https://github.com/pypa/advisory-database/tree/main/vulns/tornado/PYSEC-2012-5.yaml","https://github.com/tornadoweb/tornado","https://web.archive.org/web/20140720192646/http://secunia.com/advisories/49185","https://web.archive.org/web/20200229124524/http://www.securityfocus.com/bid/53612","http://openwall.com/lists/oss-security/2012/05/18/12","http://www.openwall.com/lists/oss-security/2012/05/18/6","http://www.tornadoweb.org/documentation/releases/v2.2.1.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-f7fv-v9rh-prvc","url":"https://osv.dev/vulnerability/GHSA-f7fv-v9rh-prvc"}],"summary":"Tornado CRLF injection vulnerability"}