Threats tagged 'brew-livereload-cve-2026-116578'

CVE-2026-116578 is an open redirect vulnerability in Tornado's RedirectHandler. It occurs when URL templates use regex capture groups that influence the scheme or host of the redirect target, allowing attackers to craft URLs that redirect users to arbitrary external sites. This can facilitate phishing attacks. The vulnerability is fixed in Tornado 6.6, which rejects redirects that alter the scheme or host. Applications using static URLs or substitutions only after a fixed host and slash are not affected.