tornadoweb/tornado
master@ 0096f28Fixes4
CVEs0
Peak severityHigh
Commits3,949
Regression coverage33.3%
Highlights
Cross-Site Request Forgery: 1 prior fix. Scrutinize any change in this area.
tornado/web.py: most-fixed (3 issues). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Cross-Site Request Forgery: 1 historical fix(es) link tornado/web.py to Cross-Site Request Forgery.
Denial of Service: 1 historical fix(es) link tornado/websocket.py to Denial of Service.
Path Traversal: 1 historical fix(es) link tornado/web.py to Path Traversal.
Last analyzed 30 Sep 2026, 02:54 UTC