openSUSE Advises on Critical DoS and XSS Vulnerabilities in python-tornado6

openSUSE Advises on Critical DoS and XSS Vulnerabilities in python-tornado6

First seen 14 Jan 2026, 02:09 UTC Linuxsecurity 95% similarity 27.4

Article Content

Browse articles
ThreatCluster

openSUSE has released an advisory regarding critical vulnerabilities in python-tornado6 affecting HTTP headers and error pages. The vulnerabilities include potential header injection and XSS attacks (CVE-2025-67724) and a DoS risk due to quadratic complexity in string operations (CVE-2025-67725). Users are advised to apply the necessary updates to mitigate these risks.

ThreatCluster AI

Community

Browse all →