Threats tagged 'brew-snakeviz-cve-2026-31958'

This advisory addresses security vulnerabilities in the Python Tornado framework, specifically a denial of service via large multipart bodies (CVE-2026-31958) and cookie attribute injection due to improper handling of cookie arguments (CVE-2026-35536). These issues affect multiple specific versions of python-tornado as used in Red Hat and Ubuntu distributions. The vulnerabilities have been assigned a medium severity level. Patches are available to remediate these issues.