https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 30 Oct 2026 13:28:47 +0000 https://db.gcve.eu/vuln/cve-2026-116577 <p><strong>Affected:</strong> tornadoweb tornado</p> <p>Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado&#39;s HTTP header parser accepts obsolete line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on the IOLoop thread. An unauthenticated client can submit a header block containing many obsolete line-folding continuations before application code runs, blocking other connections served by the process. The cost grows with max_header_size, and only availability is affected. This issue is fixed in version 6.6.</p> <p><strong>Affected:</strong> tornadoweb tornado</p> <p>Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado&#39;s HTTP header parser accepts obsolete line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on the IOLoop thread. An unauthenticated client can submit a header block containing many obsolete line-folding continuations before application code runs, blocking other connections served by the process. The cost grows with max_header_size, and only availability is affected. This issue is fixed in version 6.6.</p> https://db.gcve.eu/vuln/cve-2026-116577