https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 13:07:18 +0000 https://db.gcve.eu/vuln/cve-2012-2374 <p>CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.</p> <p>CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.</p> https://db.gcve.eu/vuln/cve-2012-2374 https://db.gcve.eu/vuln/ghsa-f7fv-v9rh-prvc <p><strong>Affected:</strong> PyPI: tornado</p> <p>CRLF injection vulnerability in the `tornado.web.RequestHandler.set_header` function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.</p> <p><strong>Affected:</strong> PyPI: tornado</p> <p>CRLF injection vulnerability in the `tornado.web.RequestHandler.set_header` function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.</p> https://db.gcve.eu/vuln/ghsa-f7fv-v9rh-prvc https://db.gcve.eu/vuln/pysec-2012-5 <p><strong>Affected:</strong> PyPI: tornado</p> <p>CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.</p> <p><strong>Affected:</strong> PyPI: tornado</p> <p>CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.</p> https://db.gcve.eu/vuln/pysec-2012-5