Tornado AsyncHTTPClient Redirect Inconsistency and DoS Mitigation via follow_redirects/max_body_size

github.com 2026-07-15查看中文 →

Security AdvisoryMediumTornado

Affected:

Tornado < latest

Fixed in:

latest

Referenced CVEs: CVE-2026-49853 · 7.7

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Fix for SSRF vulnerability in web_fetch tool with URL validation code 2026-07-19 SSRF Vulnerability Analysis and Fix in Agent web_fetch Function 2026-07-19 SSRF Vulnerability in CowAgent web_fetch Tool (CVE-2026-32619) Analysis 2026-07-19 Pre-Auth Reflected XSS in Class and Exam Timetabling System V1.0 forexam.php 2026-07-19 Pre-Auth Stored XSS Vulnerability in Class and Exam Timetabling System V1.0 with POC 2026-07-19

Offline Archive

Offline screenshot & PDF are Pro-exclusive