Threats tagged 'brew-snakeviz-ghsa-pw6j-qg29-8w7f'

Tornado versions before 6.5.7 contain a vulnerability in CurlAsyncHTTPClient where pycurl handles are reused across requests without properly clearing state. This can lead to leakage of sensitive credentials such as TLS certificates or proxy authentication data across unintended requests. The vulnerability has a medium severity with a CVSS score of 5.9. Multiple specific Tornado package versions are affected. No explicit patch information is provided in the source data.