Tornado is a scalable, non-blocking Python web framework and asynchronous networking library. CVE-2026-31958 Introduce new limits on the size and complexity of multipart bodies, including a default limit of 100 parts per request to mitigate a
April 1, 2026
An update that solves three vulnerabilities and has one security fix can now be installed.
April 1, 2026
An update that solves one vulnerability can now be installed.
April 1, 2026
An update that solves nine vulnerabilities can now be installed.
April 1, 2026
An update that solves two vulnerabilities can now be installed.
April 1, 2026
An update that solves nine vulnerabilities can now be installed.
Multiple vulnerabilities were discovered in asterisk, an Open Source Private Branch Exchange (PBX) and telephony toolkit. CVE-2026-23738 XSS vulnerability in the /httpstatus page. Cookie names/values and GET parameter names/values are rendered without HTML-escaping, allowing
March 30, 2026
An update that solves 655 vulnerabilities, contains four features and has 57 fixes can now be installed.
March 30, 2026
An update that solves one vulnerability can now be installed.
March 30, 2026
An update that solves two vulnerabilities can now be installed.
March 30, 2026
An update that solves eight vulnerabilities can now be installed.
March 30, 2026
An update that solves seven vulnerabilities can now be installed.