Threats tagged 'brew-jupyterlab-ghsa-pw6j-qg29-8w7f'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.2	EPSS 0.2%	CVE-2026-91992Tornado · CurlAsyncHTTPClient leaks per-request credentials on handle reuse High8.2EPSS 0.2%2026-08-13GCVE DatabaseCVE-2026-91992 CVE-2026-91992 is a vulnerability in Tornado's CurlAsyncHTTPClient where per-request credentials such as client TLS certificates and proxy authentication credentials leak between requests due to handle reuse without proper reset. This causes sensitive credentials from one request to be sent to unintended hosts in subsequent requests. The issue affects all Tornado versions through 6.5.6 and was fixed in version 4.5.8_1. EPSS 0.2%Report on CVE-2026-91992 Vulnerability #brew-jupyterlab-ghsa-pw6j-qg29-8w7f #homebrew	GCVE Database	2026-08-13

Page 1 of 1