[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-MGASA-2026-0216":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T11:19:25.255Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":18,"duplicates":19,"related":20,"reserved_at":9,"published_at":21,"modified_at":22,"state":9,"summary":23,"references_raw":25,"kevs":41,"epss":9,"epss_history":42,"metrics":43,"affected":44},"MGASA-2026-0216","Updated python-tornado packages fix security vulnerabilities\n\nTornado has a DoS due to too many multipart parts. (CVE-2026-31958)\nIn Tornado, cookie attribute injection could occur because the domain,\npath, and samesite arguments to .RequestHandler.set_cookie were not\nchecked for crafted characters. (CVE-2026-35536)\n",null,[],[],[],[14,16],{"_key":15},"CVE-2026-31958",{"_key":17},"CVE-2026-35536",[],[],[],"2026-06-17T06:43:54Z","2026-06-17T06:45:04.038516108Z",{"cisa_kev":24,"cisa_ransomware":24,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[26,32,37],{"url":27,"sources":28,"tags":30},"https://advisories.mageia.org/MGASA-2026-0216.html",[29],"osv_mageia",[31],"Advisory",{"url":33,"sources":34,"tags":35},"https://bugs.mageia.org/show_bug.cgi?id=35420",[29],[36],"REPORT",{"url":38,"sources":39,"tags":40},"https://ubuntu.com/security/notices/USN-8198-1",[29],[31],[],[],[],[45],{"ecosystem":46,"name":47,"vendor":48,"product":47,"cpe_part":9,"purl_type":49,"purl_namespace":48,"purl_name":47,"source":9,"versions":50},"Mageia","python-tornado","mageia","rpm",[51],{"version":52,"is_range":53,"range_type":54,"version_start":9,"version_start_type":9,"version_end":55,"version_end_type":56,"fixed_in":9},"lt6_3_2_1_4_mga9",true,"ecosystem","6.3.2-1.4.mga9","excluding"]