saltbundlepy-tornado (SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update package saltbundlepy-tornado, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2025-67725 — CVSS 7.5 (high): Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP…
• CVE-2025-67726 — CVSS 7.5 (high): Tornado is a Python web framework and asynchronous networking library. Versions 6.5.2 and below use an inefficient algorithm when parsing…
• CVE-2026-31958 — CVSS 7.5 (high): Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number…
• CVE-2025-67724 — CVSS 5.4 (medium): Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, the supplied reason phrase is used…