Debian 11 python-tornado Vulnerabilities Lead to DoS Risks

Linuxsecurity

Debian 11 python-tornado Vulnerabilities Lead to DoS Risks

First seen 1 Feb 2026, 15:42 UTC • •25.0

Article Content

1 / 2

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

Multiple vulnerabilities have been identified in the python-tornado package for Debian 11 bullseye, including CVE-2025-67724, CVE-2025-67725, and CVE-2025-67726, all published on December 12, 2025. These vulnerabilities can lead to issues such as XSS, header injection, and potential denial of service (DoS) due to inefficient parsing and performance issues. Users are advised to update to version 6.1.0-1+deb11u3 to mitigate these risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 183d ago How this analysis works

More articles in this cluster (1)

Threat Graph

7 entities, 6 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Denial of Service

Organization (1)

Debian

Vulnerability (4)

CVE-2025-67724
CVE-2025-67725
CVE-2025-67726
XSS

Affected Platform (1)

Python-tornado

Relationships

CVE-2025-67724 targets Python-tornado
CVE-2025-67725 targets Python-tornado
CVE-2025-67726 targets Python-tornado
XSS targets Python-tornado
Denial of Service targets Python-tornado
CVE-2025-67724 related to Debian

Following this threat?

Track Debian and CVE-2025-67724 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Exploitation of Sangoma Switchvox Vulnerabilities Underway Sangoma Switchvox SMB Edition 8.3 is facing active exploitation of multiple vulnerabilities, particularly CVE-2026-9586, which allows unauthenticated SQL injection leading to remote code execution. The flaw can be exploited by sending crafted HTTP POST requests to the /pa endpoint, enabling attackers to execute…

Critical Stored XSS Vulnerabilities Found in SiYuan Versions Before 3.7.4 Two critical vulnerabilities, CVE-2026-73050 and CVE-2026-73052, have been identified in SiYuan versions prior to 3.7.4. CVE-2026-73050 allows attackers to exploit stored cross-site scripting (XSS) via unescaped color fields in select options, executing arbitrary JavaScript in victim browsers. CVE-2026-73052 enables…