CVE catalog
CVE-2026-31958
Tornado is a Python web framework and asynchronous…
Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsing occurs synchronously on the main thread, this creates the possibility of denial-of-service due to the cost of parsing very large multipart bodies with many parts. This vulnerability is fixed in 6.5.5.
- Severity
- High · CVSS 8.7
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.38% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Debiansid | python-tornado | 6.5.5-1 | FixedDistribution-reported fixed boundary | [CVE-2026-31958] |
| Debiansid | python-tornado | 6.5.5-5 | Fixed | [CVE-2026-31958] |
| Debianforky | python-tornado | 6.5.5-1 | FixedDistribution-reported fixed boundary | [CVE-2026-31958] |
| Debianforky | python-tornado | 6.5.5-5 | Fixed | [CVE-2026-31958] |
Showing 4 fix observations. All 120 observations, including unknown and conflicting reports, are available below.
Provider details and historical evidence
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| UnknownRelease not reported | python-tornado | Not reported | UnknownSource applicability is not established | Provider not reported |
| UnknownRelease not reported | python-tornado | 6.4.0-1ubuntu0.5 | UnknownSource applicability is not established | Provider not reported |
| UnknownRelease not reported | python-tornado-doc | 6.4.0-1ubuntu0.5 | UnknownSource applicability is not established | Provider not reported |
| UnknownRelease not reported | python3-tornado | 6.4.0-1ubuntu0.5 | UnknownSource applicability is not established | Provider not reported |
| PipRelease not reported | tornado | 6.5.5 | UnknownSource applicability is not established | Provider not reported |
| Debianbookworm | python-tornado | Not reported | AffectedDistribution reports no fix | [CVE-2026-31958] |
| Debianbookworm | python-tornado | 6.2.0-3+deb12u4 | Affected | [CVE-2026-31958] |
| Debianbookworm-security | python-tornado | 6.2.0-3+deb12u4 | Affected | [CVE-2026-31958] |
| Debianforky | python-tornado | 6.5.5-1 | FixedDistribution-reported fixed boundary | [CVE-2026-31958] |
| Debianforky | python-tornado | 6.5.5-5 | Fixed | [CVE-2026-31958] |
| Debiansid | python-tornado | 6.5.5-1 | FixedDistribution-reported fixed boundary | [CVE-2026-31958] |
| Debiansid | python-tornado | 6.5.5-5 | Fixed | [CVE-2026-31958] |
| Debiantrixie | python-tornado | Not reported | AffectedDistribution reports no fix | [CVE-2026-31958] |
| Debiantrixie | python-tornado | 6.4.2-3+deb13u2 | Affected | [CVE-2026-31958] |
| Debiantrixie-security | python-tornado | 6.4.2-3+deb13u2 | Affected | [CVE-2026-31958] |
| Opensuseleap 15.6 | python-tornado6 | 6.3.2-150400.9.15.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1064-1] |
| Opensuseleap 16.0 | python-tornado6 | 6.5-160000.4.1 | UnknownSource applicability is not established | [OPENSUSE-SU-2026:20406-1] |
| Opensuseleap 16.0 | salt | 3006.0-160000.5.1 | UnknownSource applicability is not established | [OPENSUSE-SU-2026:20918-1] |
| Opensuseleap 16.0 | salt-test | 3006.0-160000.5.1 | UnknownSource applicability is not established | [OPENSUSE-SU-2026:20918-1] |
| Opensusetumbleweed | python-tornado6 | 6.5.5-1.1 | UnknownSource applicability is not established | [OPENSUSE-SU-2026:10374-1] |
| Suseel-9 | golang-github-lusitaniae-apache_exporter | 1.0.10-90002.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1519-1] |
| Suseel-9 | saltbundlepy | 3.11.13-90002.4.9.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1519-1] |
| Suseel-9 | saltbundlepy-core | 3.11.13-90002.4.9.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1519-1] |
| Suseel-9 | saltbundlepy-m2crypto | 0.45.1-90002.3.9.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1519-1] |
| Suseel-9 | saltbundlepy-pyzmq | 25.1.2-90002.3.9.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1519-1] |
| Suseel-9 | saltbundlepy-simplejson | 3.19.1-90002.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1519-1] |
| Suseel-9 | saltbundlepy-tornado | 6.3.2-90002.4.6.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1519-1] |
| Suseel-9 | spacecmd | 5.1.13-90002.3.9.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1519-1] |
| Suseel-9 | uyuni-tools | 5.1.26-90002.3.9.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1519-1] |
| Suseel-9 | venv-salt-minion | 3006.0-90002.5.12.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1519-1] |
| Suselinux enterprise high performance computing 15 sp4-espos | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise high performance computing 15 sp4-espos | python-tornado6 | 6.3.2-150400.9.15.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1064-1] |
| Suselinux enterprise high performance computing 15 sp4-ltss | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise high performance computing 15 sp4-ltss | python-tornado6 | 6.3.2-150400.9.15.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1064-1] |
| Suselinux enterprise high performance computing 15 sp5-espos | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise high performance computing 15 sp5-espos | python-tornado6 | 6.3.2-150400.9.15.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1064-1] |
| Suselinux enterprise high performance computing 15 sp5-ltss | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise high performance computing 15 sp5-ltss | python-tornado6 | 6.3.2-150400.9.15.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1064-1] |
| Suselinux enterprise micro 5.2 | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise micro 5.3 | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise micro 5.4 | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise micro 5.5 | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise module for basesystem 15 sp7 | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise module for python 3 15 sp7 | python-tornado6 | 6.3.2-150400.9.15.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1064-1] |
| Suselinux enterprise server 15 sp4-ltss | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise server 15 sp4-ltss | python-tornado6 | 6.3.2-150400.9.15.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1064-1] |
| Suselinux enterprise server 15 sp5-ltss | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise server 15 sp5-ltss | python-tornado6 | 6.3.2-150400.9.15.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1064-1] |
| Suselinux enterprise server 15 sp6-ltss | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise server 15 sp6-ltss | python-tornado6 | 6.3.2-150400.9.15.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1064-1] |
| Suselinux enterprise server 16.0 | python-tornado6 | 6.5-160000.4.1 | UnknownSource applicability is not established | [SUSE-SU-2026:20919-1] |
| Suselinux enterprise server for sap applications 15 sp4 | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise server for sap applications 15 sp4 | python-tornado6 | 6.3.2-150400.9.15.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1064-1] |
| Suselinux enterprise server for sap applications 15 sp5 | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise server for sap applications 15 sp5 | python-tornado6 | 6.3.2-150400.9.15.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1064-1] |
| Suselinux enterprise server for sap applications 15 sp6 | python-tornado | 4.5.3-150000.3.19.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1171-1] |
| Suselinux enterprise server for sap applications 15 sp6 | python-tornado6 | 6.3.2-150400.9.15.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1064-1] |
| Suselinux enterprise server for sap applications 16.0 | python-tornado6 | 6.5-160000.4.1 | UnknownSource applicability is not established | [SUSE-SU-2026:20919-1] |
| Suselinux micro 6.0 | python-tornado6 | 6.4-5.1 | UnknownSource applicability is not established | [SUSE-SU-2026:20797-1] |
| Suselinux micro 6.1 | python-tornado6 | 6.4-slfo.1.1_4.1 | UnknownSource applicability is not established | [SUSE-SU-2026:20770-1] |
| Suselinux micro 6.2 | python-tornado6 | 6.5-160000.4.1 | UnknownSource applicability is not established | [SUSE-SU-2026:20761-1] |
| Susemulti linux manager tools el-8 | golang-github-lusitaniae-apache_exporter | 1.0.10-80002.3.6.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1520-1] |
| Susemulti linux manager tools el-8 | spacecmd | 5.1.13-80002.3.9.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1520-1] |
| Susemulti linux manager tools el-8 | uyuni-tools | 5.1.26-80002.3.9.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1520-1] |
| Susemulti linux manager tools el-8 | venv-salt-minion | 3006.0-80002.5.12.3 | UnknownSource applicability is not established | [SUSE-SU-2026:1520-1] |
| Susemulti linux manager tools el-9 | golang-github-lusitaniae-apache_exporter | 1.0.10-90002.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1519-1] |
| Susemulti linux manager tools el-9 | spacecmd | 5.1.13-90002.3.9.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1519-1] |
| Susemulti linux manager tools el-9 | uyuni-tools | 5.1.26-90002.3.9.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1519-1] |
| Susemulti linux manager tools el-9 | venv-salt-minion | 3006.0-90002.5.12.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1519-1] |
| Susemulti linux manager tools res-7 | golang-github-lusitaniae-apache_exporter | 1.0.10-70002.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1521-1] |
| Susemulti linux manager tools res-7 | spacecmd | 5.1.13-70002.3.9.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1521-1] |
| Susemulti linux manager tools res-7 | venv-salt-minion | 3006.0-70002.5.12.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1521-1] |
| Susemulti linux manager tools sle-12 | venv-salt-minion | 3006.0-120002.5.12.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1523-1] |
| Susemulti linux manager tools sle-15 | venv-salt-minion | 3006.0-150002.5.12.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1525-1] |
| Susemulti linux manager tools sle-micro-5 | venv-salt-minion | 3006.0-150002.5.12.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1525-1] |
| Suseres-7 | golang-github-lusitaniae-apache_exporter | 1.0.10-70002.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1521-1] |
| Suseres-7 | saltbundlepy | 3.11.13-70002.4.9.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1521-1] |
| Suseres-7 | saltbundlepy-core | 3.11.13-70002.4.9.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1521-1] |
| Suseres-7 | saltbundlepy-m2crypto | 0.45.1-70002.3.9.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1521-1] |
| Suseres-7 | saltbundlepy-pyzmq | 25.1.2-70002.3.9.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1521-1] |
| Suseres-7 | saltbundlepy-simplejson | 3.19.1-70002.3.6.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1521-1] |
| Suseres-7 | saltbundlepy-tornado | 6.3.2-70002.4.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1521-1] |
| Suseres-7 | spacecmd | 5.1.13-70002.3.9.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1521-1] |
| Suseres-7 | venv-salt-minion | 3006.0-70002.5.12.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1521-1] |
| Suseres-8 | golang-github-lusitaniae-apache_exporter | 1.0.10-80002.3.6.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1520-1] |
| Suseres-8 | saltbundlepy | 3.11.13-80002.4.9.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1520-1] |
| Suseres-8 | saltbundlepy-core | 3.11.13-80002.4.9.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1520-1] |
| Suseres-8 | saltbundlepy-m2crypto | 0.45.1-80002.3.9.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1520-1] |
| Suseres-8 | saltbundlepy-pyzmq | 25.1.2-80002.3.9.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1520-1] |
| Suseres-8 | saltbundlepy-simplejson | 3.19.1-80002.3.6.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1520-1] |
| Suseres-8 | saltbundlepy-tornado | 6.3.2-80002.4.6.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1520-1] |
| Suseres-8 | spacecmd | 5.1.13-80002.3.9.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1520-1] |
| Suseres-8 | uyuni-tools | 5.1.26-80002.3.9.2 | UnknownSource applicability is not established | [SUSE-SU-2026:1520-1] |
| Suseres-8 | venv-salt-minion | 3006.0-80002.5.12.3 | UnknownSource applicability is not established | [SUSE-SU-2026:1520-1] |
| Ubuntu24.04 | python-tornado | 6.3.2-1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntu24.04 | python-tornado | 6.4.0-0ubuntu1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntu24.04 | python-tornado | 6.4.0-1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntu24.04 | python-tornado | 6.4.0-1build1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntu24.04 | python-tornado | 6.4.0-1ubuntu0.1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntu24.04 | python-tornado | 6.4.0-1ubuntu0.2 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntu24.04 | python-tornado | 6.4.0-1ubuntu0.4 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntu24.04 | python-tornado | 6.4.0-1ubuntu0.5 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntu25.10 | python-tornado | 6.4.2-1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntu25.10 | python-tornado | 6.4.2-2 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntu25.10 | python-tornado | 6.4.2-2ubuntu1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntu25.10 | python-tornado | 6.4.2-3 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntu25.10 | python-tornado | 6.4.2-3ubuntu0.2 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntu25.10 | python-tornado | 6.4.2-3ubuntu0.3 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntu26.04 | python-tornado | 6.4.2-3 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958] |
| Ubuntu26.04 | python-tornado | 6.5.2-3 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958] |
| Ubuntu26.04 | python-tornado | 6.5.4-0.1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958] |
| Ubuntu26.04 | python-tornado | 6.5.4-0.1ubuntu0.1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958] |
| Ubuntupro | python-tornado | 6.1.0-1build1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntupro | python-tornado | 6.1.0-2 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntupro | python-tornado | 6.1.0-3 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntupro | python-tornado | 6.1.0-3build1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntupro | python-tornado | 6.1.0-3ubuntu0.1~esm1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntupro | python-tornado | 6.1.0-3ubuntu0.1~esm2 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntupro | python-tornado | 6.1.0-3ubuntu0.1~esm4 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
| Ubuntupro | python-tornado | 6.1.0-3ubuntu0.1~esm5 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-31958][USN-8198-1] |
Original provider fields
{
"package_releases": [
{
"name": "python-tornado",
"status": "fixed",
"release": "sid",
"version": "6.5.5-5"
},
{
"name": "python-tornado",
"status": "fixed",
"release": "forky",
"version": "6.5.5-5"
},
{
"name": "python-tornado",
"status": "vulnerable",
"release": "trixie",
"version": "6.4.2-3+deb13u2"
},
{
"name": "python-tornado",
"status": "vulnerable",
"release": "trixie-security",
"version": "6.4.2-3+deb13u2"
},
{
"name": "python-tornado",
"status": "vulnerable",
"release": "bookworm",
"version": "6.2.0-3+deb12u4"
},
{
"name": "python-tornado",
"status": "vulnerable",
"release": "bookworm-security",
"version": "6.2.0-3+deb12u4"
}
],
"fixed_versions": [
{
"bug": 1130507,
"name": "python-tornado",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "6.5.5-1"
},
{
"bug": 1130507,
"name": "python-tornado",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "6.5.5-1"
},
{
"bug": 1130507,
"name": "python-tornado",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": ""
},
{
"bug": 1130507,
"name": "python-tornado",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": ""
}
],
"distribution_packages": [
{
"name": "python-tornado",
"fixed_version": "not yet fixed",
"applicability_unknown": true
},
{
"name": "tornado",
"ecosystem": "pip",
"fixed_version": "6.5.5",
"applicability_unknown": true
},
{
"name": "python-tornado",
"fixed_version": "6.4.0-1ubuntu0.5",
"applicability_unknown": true
},
{
"name": "python-tornado-doc",
"fixed_version": "6.4.0-1ubuntu0.5",
"applicability_unknown": true
},
{
"name": "python3-tornado",
"fixed_version": "6.4.0-1ubuntu0.5",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.1.0-3ubuntu0.1~esm5"
}
]
}
],
"release": "pro",
"versions": [
"6.1.0-1build1",
"6.1.0-2",
"6.1.0-3",
"6.1.0-3build1",
"6.1.0-3ubuntu0.1~esm1",
"6.1.0-3ubuntu0.1~esm2",
"6.1.0-3ubuntu0.1~esm4"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-31958",
"fixed_version": "6.1.0-3ubuntu0.1~esm5",
"provider_source": "pypi",
"provider_record_id": "UBUNTU-CVE-2026-31958",
"provider_updated_at": "2026-07-22T20:45:49.156207387Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.4.0-1ubuntu0.5"
}
]
}
],
"release": "24.04",
"versions": [
"6.3.2-1",
"6.4.0-0ubuntu1",
"6.4.0-1",
"6.4.0-1build1",
"6.4.0-1ubuntu0.1",
"6.4.0-1ubuntu0.2",
"6.4.0-1ubuntu0.4"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-31958",
"fixed_version": "6.4.0-1ubuntu0.5",
"provider_source": "pypi",
"provider_record_id": "UBUNTU-CVE-2026-31958",
"provider_updated_at": "2026-07-22T20:45:49.156207387Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.4.2-3ubuntu0.3"
}
]
}
],
"release": "25.10",
"versions": [
"6.4.2-1",
"6.4.2-2",
"6.4.2-2ubuntu1",
"6.4.2-3",
"6.4.2-3ubuntu0.2"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-31958",
"fixed_version": "6.4.2-3ubuntu0.3",
"provider_source": "pypi",
"provider_record_id": "UBUNTU-CVE-2026-31958",
"provider_updated_at": "2026-07-22T20:45:49.156207387Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.5.4-0.1ubuntu0.1"
}
]
}
],
"release": "26.04",
"versions": [
"6.4.2-3",
"6.5.2-3",
"6.5.4-0.1"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-31958",
"fixed_version": "6.5.4-0.1ubuntu0.1",
"provider_source": "pypi",
"provider_record_id": "UBUNTU-CVE-2026-31958",
"provider_updated_at": "2026-07-22T20:45:49.156207387Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.1.0-3ubuntu0.1~esm5"
}
]
}
],
"release": "pro",
"versions": [
"6.1.0-1build1",
"6.1.0-2",
"6.1.0-3",
"6.1.0-3build1",
"6.1.0-3ubuntu0.1~esm1",
"6.1.0-3ubuntu0.1~esm2",
"6.1.0-3ubuntu0.1~esm4"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/USN-8198-1",
"fixed_version": "6.1.0-3ubuntu0.1~esm5",
"provider_source": "pypi",
"provider_record_id": "USN-8198-1",
"provider_updated_at": "2026-06-25T13:32:32.079152423Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.4.0-1ubuntu0.5"
}
]
}
],
"release": "24.04",
"versions": [
"6.3.2-1",
"6.4.0-0ubuntu1",
"6.4.0-1",
"6.4.0-1build1",
"6.4.0-1ubuntu0.1",
"6.4.0-1ubuntu0.2",
"6.4.0-1ubuntu0.4"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/USN-8198-1",
"fixed_version": "6.4.0-1ubuntu0.5",
"provider_source": "pypi",
"provider_record_id": "USN-8198-1",
"provider_updated_at": "2026-06-25T13:32:32.079152423Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.4.2-3ubuntu0.3"
}
]
}
],
"release": "25.10",
"versions": [
"6.4.2-1",
"6.4.2-2",
"6.4.2-2ubuntu1",
"6.4.2-3",
"6.4.2-3ubuntu0.2"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/USN-8198-1",
"fixed_version": "6.4.2-3ubuntu0.3",
"provider_source": "pypi",
"provider_record_id": "USN-8198-1",
"provider_updated_at": "2026-06-25T13:32:32.079152423Z",
"applicability_unknown": true
},
{
"name": "salt",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3006.0-160000.5.1"
}
]
}
],
"release": "leap 16.0",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2026:20918-1",
"fixed_version": "3006.0-160000.5.1",
"provider_source": "pypi",
"provider_record_id": "OPENSUSE-SU-2026:20918-1",
"provider_updated_at": "2026-06-10T18:24:16.243159711Z",
"applicability_unknown": true
},
{
"name": "salt-test",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3006.0-160000.5.1"
}
]
}
],
"release": "leap 16.0",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2026:20918-1",
"fixed_version": "3006.0-160000.5.1",
"provider_source": "pypi",
"provider_record_id": "OPENSUSE-SU-2026:20918-1",
"provider_updated_at": "2026-06-10T18:24:16.243159711Z",
"applicability_unknown": true
},
{
"name": "golang-github-lusitaniae-apache_exporter",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.10-80002.3.6.2"
}
]
}
],
"release": "res-8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1520-1",
"fixed_version": "1.0.10-80002.3.6.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1520-1",
"provider_updated_at": "2026-04-22T08:16:49.622487Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.11.13-80002.4.9.2"
}
]
}
],
"release": "res-8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1520-1",
"fixed_version": "3.11.13-80002.4.9.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1520-1",
"provider_updated_at": "2026-04-22T08:16:49.622487Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-core",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.11.13-80002.4.9.2"
}
]
}
],
"release": "res-8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1520-1",
"fixed_version": "3.11.13-80002.4.9.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1520-1",
"provider_updated_at": "2026-04-22T08:16:49.622487Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-m2crypto",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.45.1-80002.3.9.2"
}
]
}
],
"release": "res-8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1520-1",
"fixed_version": "0.45.1-80002.3.9.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1520-1",
"provider_updated_at": "2026-04-22T08:16:49.622487Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-pyzmq",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "25.1.2-80002.3.9.2"
}
]
}
],
"release": "res-8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1520-1",
"fixed_version": "25.1.2-80002.3.9.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1520-1",
"provider_updated_at": "2026-04-22T08:16:49.622487Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-simplejson",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.19.1-80002.3.6.2"
}
]
}
],
"release": "res-8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1520-1",
"fixed_version": "3.19.1-80002.3.6.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1520-1",
"provider_updated_at": "2026-04-22T08:16:49.622487Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-80002.4.6.2"
}
]
}
],
"release": "res-8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1520-1",
"fixed_version": "6.3.2-80002.4.6.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1520-1",
"provider_updated_at": "2026-04-22T08:16:49.622487Z",
"applicability_unknown": true
},
{
"name": "spacecmd",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.1.13-80002.3.9.2"
}
]
}
],
"release": "res-8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1520-1",
"fixed_version": "5.1.13-80002.3.9.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1520-1",
"provider_updated_at": "2026-04-22T08:16:49.622487Z",
"applicability_unknown": true
},
{
"name": "uyuni-tools",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.1.26-80002.3.9.2"
}
]
}
],
"release": "res-8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1520-1",
"fixed_version": "5.1.26-80002.3.9.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1520-1",
"provider_updated_at": "2026-04-22T08:16:49.622487Z",
"applicability_unknown": true
},
{
"name": "venv-salt-minion",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3006.0-80002.5.12.3"
}
]
}
],
"release": "res-8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1520-1",
"fixed_version": "3006.0-80002.5.12.3",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1520-1",
"provider_updated_at": "2026-04-22T08:16:49.622487Z",
"applicability_unknown": true
},
{
"name": "golang-github-lusitaniae-apache_exporter",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.10-80002.3.6.2"
}
]
}
],
"release": "multi linux manager tools el-8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1520-1",
"fixed_version": "1.0.10-80002.3.6.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1520-1",
"provider_updated_at": "2026-04-22T08:16:49.622487Z",
"applicability_unknown": true
},
{
"name": "spacecmd",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.1.13-80002.3.9.2"
}
]
}
],
"release": "multi linux manager tools el-8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1520-1",
"fixed_version": "5.1.13-80002.3.9.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1520-1",
"provider_updated_at": "2026-04-22T08:16:49.622487Z",
"applicability_unknown": true
},
{
"name": "uyuni-tools",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.1.26-80002.3.9.2"
}
]
}
],
"release": "multi linux manager tools el-8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1520-1",
"fixed_version": "5.1.26-80002.3.9.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1520-1",
"provider_updated_at": "2026-04-22T08:16:49.622487Z",
"applicability_unknown": true
},
{
"name": "venv-salt-minion",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3006.0-80002.5.12.3"
}
]
}
],
"release": "multi linux manager tools el-8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1520-1",
"fixed_version": "3006.0-80002.5.12.3",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1520-1",
"provider_updated_at": "2026-04-22T08:16:49.622487Z",
"applicability_unknown": true
},
{
"name": "golang-github-lusitaniae-apache_exporter",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.10-90002.3.6.1"
}
]
}
],
"release": "el-9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1519-1",
"fixed_version": "1.0.10-90002.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1519-1",
"provider_updated_at": "2026-04-22T08:16:46.250560Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.11.13-90002.4.9.1"
}
]
}
],
"release": "el-9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1519-1",
"fixed_version": "3.11.13-90002.4.9.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1519-1",
"provider_updated_at": "2026-04-22T08:16:46.250560Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-core",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.11.13-90002.4.9.1"
}
]
}
],
"release": "el-9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1519-1",
"fixed_version": "3.11.13-90002.4.9.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1519-1",
"provider_updated_at": "2026-04-22T08:16:46.250560Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-m2crypto",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.45.1-90002.3.9.2"
}
]
}
],
"release": "el-9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1519-1",
"fixed_version": "0.45.1-90002.3.9.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1519-1",
"provider_updated_at": "2026-04-22T08:16:46.250560Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-pyzmq",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "25.1.2-90002.3.9.1"
}
]
}
],
"release": "el-9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1519-1",
"fixed_version": "25.1.2-90002.3.9.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1519-1",
"provider_updated_at": "2026-04-22T08:16:46.250560Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-simplejson",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.19.1-90002.3.6.1"
}
]
}
],
"release": "el-9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1519-1",
"fixed_version": "3.19.1-90002.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1519-1",
"provider_updated_at": "2026-04-22T08:16:46.250560Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-90002.4.6.2"
}
]
}
],
"release": "el-9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1519-1",
"fixed_version": "6.3.2-90002.4.6.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1519-1",
"provider_updated_at": "2026-04-22T08:16:46.250560Z",
"applicability_unknown": true
},
{
"name": "spacecmd",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.1.13-90002.3.9.1"
}
]
}
],
"release": "el-9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1519-1",
"fixed_version": "5.1.13-90002.3.9.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1519-1",
"provider_updated_at": "2026-04-22T08:16:46.250560Z",
"applicability_unknown": true
},
{
"name": "uyuni-tools",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.1.26-90002.3.9.1"
}
]
}
],
"release": "el-9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1519-1",
"fixed_version": "5.1.26-90002.3.9.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1519-1",
"provider_updated_at": "2026-04-22T08:16:46.250560Z",
"applicability_unknown": true
},
{
"name": "venv-salt-minion",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3006.0-90002.5.12.2"
}
]
}
],
"release": "el-9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1519-1",
"fixed_version": "3006.0-90002.5.12.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1519-1",
"provider_updated_at": "2026-04-22T08:16:46.250560Z",
"applicability_unknown": true
},
{
"name": "golang-github-lusitaniae-apache_exporter",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.10-90002.3.6.1"
}
]
}
],
"release": "multi linux manager tools el-9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1519-1",
"fixed_version": "1.0.10-90002.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1519-1",
"provider_updated_at": "2026-04-22T08:16:46.250560Z",
"applicability_unknown": true
},
{
"name": "spacecmd",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.1.13-90002.3.9.1"
}
]
}
],
"release": "multi linux manager tools el-9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1519-1",
"fixed_version": "5.1.13-90002.3.9.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1519-1",
"provider_updated_at": "2026-04-22T08:16:46.250560Z",
"applicability_unknown": true
},
{
"name": "uyuni-tools",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.1.26-90002.3.9.1"
}
]
}
],
"release": "multi linux manager tools el-9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1519-1",
"fixed_version": "5.1.26-90002.3.9.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1519-1",
"provider_updated_at": "2026-04-22T08:16:46.250560Z",
"applicability_unknown": true
},
{
"name": "venv-salt-minion",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3006.0-90002.5.12.2"
}
]
}
],
"release": "multi linux manager tools el-9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1519-1",
"fixed_version": "3006.0-90002.5.12.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1519-1",
"provider_updated_at": "2026-04-22T08:16:46.250560Z",
"applicability_unknown": true
},
{
"name": "venv-salt-minion",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3006.0-150002.5.12.2"
}
]
}
],
"release": "multi linux manager tools sle-15",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1525-1",
"fixed_version": "3006.0-150002.5.12.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1525-1",
"provider_updated_at": "2026-04-22T08:16:43.516804Z",
"applicability_unknown": true
},
{
"name": "venv-salt-minion",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3006.0-150002.5.12.2"
}
]
}
],
"release": "multi linux manager tools sle-micro-5",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1525-1",
"fixed_version": "3006.0-150002.5.12.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1525-1",
"provider_updated_at": "2026-04-22T08:16:43.516804Z",
"applicability_unknown": true
},
{
"name": "venv-salt-minion",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3006.0-120002.5.12.1"
}
]
}
],
"release": "multi linux manager tools sle-12",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1523-1",
"fixed_version": "3006.0-120002.5.12.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1523-1",
"provider_updated_at": "2026-04-22T08:16:31.194380Z",
"applicability_unknown": true
},
{
"name": "golang-github-lusitaniae-apache_exporter",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.10-70002.3.6.1"
}
]
}
],
"release": "res-7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1521-1",
"fixed_version": "1.0.10-70002.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1521-1",
"provider_updated_at": "2026-04-22T08:15:45.496123Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.11.13-70002.4.9.1"
}
]
}
],
"release": "res-7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1521-1",
"fixed_version": "3.11.13-70002.4.9.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1521-1",
"provider_updated_at": "2026-04-22T08:15:45.496123Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-core",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.11.13-70002.4.9.1"
}
]
}
],
"release": "res-7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1521-1",
"fixed_version": "3.11.13-70002.4.9.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1521-1",
"provider_updated_at": "2026-04-22T08:15:45.496123Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-m2crypto",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.45.1-70002.3.9.2"
}
]
}
],
"release": "res-7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1521-1",
"fixed_version": "0.45.1-70002.3.9.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1521-1",
"provider_updated_at": "2026-04-22T08:15:45.496123Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-pyzmq",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "25.1.2-70002.3.9.2"
}
]
}
],
"release": "res-7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1521-1",
"fixed_version": "25.1.2-70002.3.9.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1521-1",
"provider_updated_at": "2026-04-22T08:15:45.496123Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-simplejson",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.19.1-70002.3.6.2"
}
]
}
],
"release": "res-7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1521-1",
"fixed_version": "3.19.1-70002.3.6.2",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1521-1",
"provider_updated_at": "2026-04-22T08:15:45.496123Z",
"applicability_unknown": true
},
{
"name": "saltbundlepy-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-70002.4.6.1"
}
]
}
],
"release": "res-7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1521-1",
"fixed_version": "6.3.2-70002.4.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1521-1",
"provider_updated_at": "2026-04-22T08:15:45.496123Z",
"applicability_unknown": true
},
{
"name": "spacecmd",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.1.13-70002.3.9.1"
}
]
}
],
"release": "res-7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1521-1",
"fixed_version": "5.1.13-70002.3.9.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1521-1",
"provider_updated_at": "2026-04-22T08:15:45.496123Z",
"applicability_unknown": true
},
{
"name": "venv-salt-minion",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3006.0-70002.5.12.1"
}
]
}
],
"release": "res-7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1521-1",
"fixed_version": "3006.0-70002.5.12.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1521-1",
"provider_updated_at": "2026-04-22T08:15:45.496123Z",
"applicability_unknown": true
},
{
"name": "golang-github-lusitaniae-apache_exporter",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.10-70002.3.6.1"
}
]
}
],
"release": "multi linux manager tools res-7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1521-1",
"fixed_version": "1.0.10-70002.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1521-1",
"provider_updated_at": "2026-04-22T08:15:45.496123Z",
"applicability_unknown": true
},
{
"name": "spacecmd",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.1.13-70002.3.9.1"
}
]
}
],
"release": "multi linux manager tools res-7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1521-1",
"fixed_version": "5.1.13-70002.3.9.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1521-1",
"provider_updated_at": "2026-04-22T08:15:45.496123Z",
"applicability_unknown": true
},
{
"name": "venv-salt-minion",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3006.0-70002.5.12.1"
}
]
}
],
"release": "multi linux manager tools res-7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1521-1",
"fixed_version": "3006.0-70002.5.12.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1521-1",
"provider_updated_at": "2026-04-22T08:15:45.496123Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise micro 5.3",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise micro 5.4",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise micro 5.5",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise module for basesystem 15 sp7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp4-espos",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp4-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-espos",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise server 15 sp4-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise server 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise server 15 sp6-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp4",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp5",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp6",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.5.3-150000.3.19.1"
}
]
}
],
"release": "linux enterprise micro 5.2",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1171-1",
"fixed_version": "4.5.3-150000.3.19.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1171-1",
"provider_updated_at": "2026-04-03T07:45:30.775031Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.5-160000.4.1"
}
]
}
],
"release": "linux enterprise server 16.0",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:20919-1",
"fixed_version": "6.5-160000.4.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:20919-1",
"provider_updated_at": "2026-04-02T17:24:06.737526Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.5-160000.4.1"
}
]
}
],
"release": "linux enterprise server for sap applications 16.0",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:20919-1",
"fixed_version": "6.5-160000.4.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:20919-1",
"provider_updated_at": "2026-04-02T17:24:06.737526Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.5-160000.4.1"
}
]
}
],
"release": "leap 16.0",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2026:20406-1",
"fixed_version": "6.5-160000.4.1",
"provider_source": "pypi",
"provider_record_id": "OPENSUSE-SU-2026:20406-1",
"provider_updated_at": "2026-03-29T17:25:06.564790Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-150400.9.15.1"
}
]
}
],
"release": "linux enterprise module for python 3 15 sp7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1064-1",
"fixed_version": "6.3.2-150400.9.15.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1064-1",
"provider_updated_at": "2026-03-27T08:48:28.343492Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-150400.9.15.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp4-espos",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1064-1",
"fixed_version": "6.3.2-150400.9.15.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1064-1",
"provider_updated_at": "2026-03-27T08:48:28.343492Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-150400.9.15.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp4-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1064-1",
"fixed_version": "6.3.2-150400.9.15.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1064-1",
"provider_updated_at": "2026-03-27T08:48:28.343492Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-150400.9.15.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-espos",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1064-1",
"fixed_version": "6.3.2-150400.9.15.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1064-1",
"provider_updated_at": "2026-03-27T08:48:28.343492Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-150400.9.15.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1064-1",
"fixed_version": "6.3.2-150400.9.15.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1064-1",
"provider_updated_at": "2026-03-27T08:48:28.343492Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-150400.9.15.1"
}
]
}
],
"release": "linux enterprise server 15 sp4-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1064-1",
"fixed_version": "6.3.2-150400.9.15.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1064-1",
"provider_updated_at": "2026-03-27T08:48:28.343492Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-150400.9.15.1"
}
]
}
],
"release": "linux enterprise server 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1064-1",
"fixed_version": "6.3.2-150400.9.15.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1064-1",
"provider_updated_at": "2026-03-27T08:48:28.343492Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-150400.9.15.1"
}
]
}
],
"release": "linux enterprise server 15 sp6-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1064-1",
"fixed_version": "6.3.2-150400.9.15.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1064-1",
"provider_updated_at": "2026-03-27T08:48:28.343492Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-150400.9.15.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp4",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1064-1",
"fixed_version": "6.3.2-150400.9.15.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1064-1",
"provider_updated_at": "2026-03-27T08:48:28.343492Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-150400.9.15.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp5",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1064-1",
"fixed_version": "6.3.2-150400.9.15.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1064-1",
"provider_updated_at": "2026-03-27T08:48:28.343492Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-150400.9.15.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp6",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1064-1",
"fixed_version": "6.3.2-150400.9.15.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1064-1",
"provider_updated_at": "2026-03-27T08:48:28.343492Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3.2-150400.9.15.1"
}
]
}
],
"release": "leap 15.6",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1064-1",
"fixed_version": "6.3.2-150400.9.15.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1064-1",
"provider_updated_at": "2026-03-27T08:48:28.343492Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.4-slfo.1.1_4.1"
}
]
}
],
"release": "linux micro 6.1",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:20770-1",
"fixed_version": "6.4-slfo.1.1_4.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:20770-1",
"provider_updated_at": "2026-03-25T17:33:48.833882Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.5-160000.4.1"
}
]
}
],
"release": "linux micro 6.2",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:20761-1",
"fixed_version": "6.5-160000.4.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:20761-1",
"provider_updated_at": "2026-03-25T17:33:47.764384Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.4-5.1"
}
]
}
],
"release": "linux micro 6.0",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:20797-1",
"fixed_version": "6.4-5.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:20797-1",
"provider_updated_at": "2026-03-25T17:23:54.458972Z",
"applicability_unknown": true
},
{
"name": "python-tornado6",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.5.5-1.1"
}
]
}
],
"release": "tumbleweed",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2026:10374-1",
"fixed_version": "6.5.5-1.1",
"provider_source": "pypi",
"provider_record_id": "OPENSUSE-SU-2026:10374-1",
"provider_updated_at": "2026-03-15T11:45:34.885980Z",
"applicability_unknown": true
}
]
}Publisher notes
[trixie] python-tornado: Minor issue
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [python3-tornado]Unknown
Source package: [python-tornado]
Details (4)
6.2.0-3+deb12u4· amd64 · bookwormAffected
nvd · python-tornado · debian · bookworm; nvd · python-tornado · debian · 12
6.2.0-3+deb12u4· arm64 · bookwormAffected
nvd · python-tornado · debian · bookworm; nvd · python-tornado · debian · 12
6.2.0-3+deb12u4· amd64 · bookworm-securityAffected
nvd · python-tornado · debian · bookworm; nvd · python-tornado · debian · 12
6.2.0-3+deb12u4· arm64 · bookworm-securityAffected
nvd · python-tornado · debian · bookworm; nvd · python-tornado · debian · 12
- [python-tornado-doc]Unknown
Source package: [python-tornado]
Details (4)
6.2.0-3+deb12u4· all · bookwormAffected
nvd · python-tornado · debian · bookworm; nvd · python-tornado · debian · 12
6.2.0-3+deb12u4· all · bookwormAffected
nvd · python-tornado · debian · bookworm; nvd · python-tornado · debian · 12
6.2.0-3+deb12u4· all · bookworm-securityAffected
nvd · python-tornado · debian · bookworm; nvd · python-tornado · debian · 12
6.2.0-3+deb12u4· all · bookworm-securityAffected
nvd · python-tornado · debian · bookworm; nvd · python-tornado · debian · 12
[Debian 13 (Trixie)]
- [python3-tornado]Unknown
Source package: [python-tornado]
Details (4)
6.4.2-3+deb13u2· amd64 · trixieAffected
nvd · python-tornado · debian · 13
6.4.2-3+deb13u2· arm64 · trixieAffected
nvd · python-tornado · debian · 13
6.4.2-3+deb13u2· amd64 · trixie-securityAffected
nvd · python-tornado · debian · 13
6.4.2-3+deb13u2· arm64 · trixie-securityAffected
nvd · python-tornado · debian · 13
- [python-tornado-doc]Unknown
Source package: [python-tornado]
Details (4)
6.4.2-3+deb13u2· all · trixieAffected
nvd · python-tornado · debian · 13
6.4.2-3+deb13u2· all · trixieAffected
nvd · python-tornado · debian · 13
6.4.2-3+deb13u2· all · trixie-securityAffected
nvd · python-tornado · debian · 13
6.4.2-3+deb13u2· all · trixie-securityAffected
nvd · python-tornado · debian · 13
[openSUSE Tumbleweed]
- [python313-tornado6]Unknown
Source package: [python-tornado6]
Details (1)
6.5.8-1.1· x86_64 · tumbleweedUnknown · Fixed:
6.5.5-1.1Version impact unknown
nvd · python-tornado6 · opensuse · tumbleweed
- [python314-tornado6]Unknown
Source package: [python-tornado6]
Details (1)
6.5.8-1.1· x86_64 · tumbleweedUnknown · Fixed:
6.5.5-1.1Version impact unknown
nvd · python-tornado6 · opensuse · tumbleweed
Observed:
References
- [https://access.redhat.com/errata/RHSA-2026:24977]
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10374-1.json]
- [https://github.com/advisories/GHSA-qjxf-f2mg-c6mc]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-31958]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-31958]
- [https://osv.dev/vulnerability/SUSE-SU-2026:1064-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:1171-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:1519-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:1520-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:1521-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:1523-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:1525-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:20761-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:20770-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:20797-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:20919-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2026-31958]
- [https://osv.dev/vulnerability/USN-8198-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:10374-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:20406-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:20918-1]
- [https://security-tracker.debian.org/tracker/CVE-2026-31958]
- [https://ubuntu.com/security/notices/USN-8198-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1112.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [GitHub Advisory Database] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]