Debian 11 python-tornado Vulnerabilities Lead to DoS Risks

Multiple vulnerabilities have been identified in the python-tornado package for Debian 11 bullseye, including CVE-2025-67724, CVE-2025-67725, and CVE-2025-67726, all published on December 12, 2025. These vulnerabilities can lead to issues such as XSS, header injection, and potential denial of service (DoS) due to inefficient parsing and performance issues. Users are advised to update to version 6.1.0-1+deb11u3 to mitigate these risks.