Executive brief
Tornado vulnerable to excessive logging caused by malformed multipart form data
Affected products
- PyPI tornado
Junglewise Threat Intelligence
CVE-2025-47287: PYSEC-2026-1974 - Tornado vulnerable to excessive logging caused by malformed multipart form data
CVE-2025-47287 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: tornado (PyPI). Vendors: PyPI.
Related threats
- Tornado multipart form data memory amplification DoS in httputil.py
- Tornado cookie attribute injection via case-insensitive kwargs
- Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded requ
- Tornado quadratic DoS in httputil _parseparam
- Tornado quadratic DoS via repeated header coalescing