https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-24T15:07:35.481161+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2012-2374 CVE-2012-2374 2026-10-24T15:07:35.484095+00:00

CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.

 https://db.gcve.eu/vuln/ghsa-f7fv-v9rh-prvc GHSA-f7fv-v9rh-prvc — Tornado CRLF injection vulnerability 2026-10-24T15:07:35.484247+00:00

Affected: PyPI: tornado

CRLF injection vulnerability in the `tornado.web.RequestHandler.set_header` function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.

 https://db.gcve.eu/vuln/pysec-2012-5 PYSEC-2012-5 2026-10-24T15:07:35.484302+00:00

Affected: PyPI: tornado

CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.