https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 13:44:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-104116 EUVD-2026-104116 https://cve.radiocsirt.org/vuln/euvd-2026-104116 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9720 <p>Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests.</p> <p>Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-9720 https://cve.radiocsirt.org/vuln/ghsa-8vpw-mgpf-mpvv <p><strong>Affected:</strong> PyPI: tornado</p> <p>Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests.</p> <p><strong>Affected:</strong> PyPI: tornado</p> <p>Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests.</p> https://cve.radiocsirt.org/vuln/ghsa-8vpw-mgpf-mpvv https://cve.radiocsirt.org/vuln/gsd-2014-9720 gsd-2014-9720 https://cve.radiocsirt.org/vuln/gsd-2014-9720 https://cve.radiocsirt.org/vuln/pysec-2020-213 <p><strong>Affected:</strong> PyPI: tornado</p> <p>Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests.</p> <p><strong>Affected:</strong> PyPI: tornado</p> <p>Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests.</p> https://cve.radiocsirt.org/vuln/pysec-2020-213 https://cve.radiocsirt.org/vuln/suse-su-2016:1195-1 <p>Security update for python-tornado</p> <p>Security update for python-tornado</p> https://cve.radiocsirt.org/vuln/suse-su-2016:1195-1