Executive brief
Tornado has an HTTP cookie parsing DoS vulnerability
Affected products
- PyPI tornado
Junglewise Threat Intelligence
CVE-2024-52804: PYSEC-2026-1975 - Tornado has an HTTP cookie parsing DoS vulnerability
CVE-2024-52804 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: tornado (PyPI). Vendors: PyPI.
Related threats
- Tornado multipart form data memory amplification DoS in httputil.py
- Tornado cookie attribute injection via case-insensitive kwargs
- Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded requ
- Tornado quadratic DoS in httputil _parseparam
- Tornado quadratic DoS via repeated header coalescing