Tornado

Tornado: Unbounded query-string argument count allows event-loop-stalling DoS

Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in tornado

Tornado has incomplete validation of cookie attributes

Tornado vulnerable to excessive logging caused by malformed multipart form data

tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)

Tornado XSRF cookie allows side-channel attack against TLS (BREACH attack)

Tornado has an HTTP cookie parsing DoS vulnerability

Tornado: StaticFileHandler follows symlinks outside static root (path traversal)

Tornado: Quadratic DoS via Repeated Header Coalescing