Threats tagged 'brew-livereload-cve-2026-116577'

Tornado HTTP servers have a vulnerability where parsing HTTP headers with obsolete line folding causes quadratic CPU usage, leading to event loop blocking and degraded availability. This affects all Tornado HTTP servers before version 6.6. The issue is fixed by removing support for obsolete line folding in Tornado 6.6. The vulnerability impacts availability only, with no confidentiality or integrity risks.