[{"data":1,"prerenderedAt":568},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-tornado-ab0f364e":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":271,"related":333},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"paket",{"id":79,"slug":80,"identity":81,"ecosystem":82,"name":83,"label":83,"category":84,"aiRelevant":46,"provider":84,"repositoryCount":65,"occurrenceCount":85,"directRepositoryCount":38,"versionCount":86,"licenseExpressions":87,"advisoryIds":89,"advisoryCount":85,"verifiedAttestation":100,"repositories":101,"versions":152},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","pypi","tornado",null,10,6,[88],"Apache-2.0",[90,91,92,93,94,95,96,97,98,99],"GHSA-3x9g-8vmp-wqvf","GHSA-78cv-mqj4-43f7","GHSA-7cx3-6m66-7c5m","GHSA-cx3h-4qpv-8hc9","GHSA-mgf9-4vpg-hj56","GHSA-pw6j-qg29-8w7f","GHSA-qjxf-f2mg-c6mc","PYSEC-2025-265","PYSEC-2025-266","PYSEC-2025-267",true,[102,110,119,126,133,140,146],{"id":103,"slug":104,"name":105,"pathWithNamespace":106,"versions":107,"evidenceCount":109},"opencode:7202","opencode-7202","MUCGPT","landeshauptstadt-muenchen\u002Fmucgpt",[108],"6.5.7",3,{"id":111,"slug":112,"name":113,"pathWithNamespace":114,"versions":115,"evidenceCount":118},"opencode:10162","opencode-10162","SmartPlanAI Anwendung","sh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung",[116,117],"6.5.2","6.5.5",2,{"id":120,"slug":121,"name":122,"pathWithNamespace":123,"versions":124,"evidenceCount":32},"opencode:5530","opencode-5530","GSA Extraction","uba-ki-lab\u002Fgsa-extraction",[125],"6.5.1",{"id":127,"slug":128,"name":129,"pathWithNamespace":130,"versions":131,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[132],"6.4.2",{"id":134,"slug":135,"name":136,"pathWithNamespace":137,"versions":138,"evidenceCount":32},"opencode:10775","opencode-10775","Ressource Efficient Computer Vision","uba-ki-lab\u002Fressource-efficient-computer-vision",[139],"6.5.4",{"id":141,"slug":142,"name":143,"pathWithNamespace":144,"versions":145,"evidenceCount":32},"opencode:5142","opencode-5142","strahlenexposition","uba-ki-lab\u002Fstrahlenexposition",[132],{"id":147,"slug":148,"name":149,"pathWithNamespace":150,"versions":151,"evidenceCount":32},"opencode:7788","opencode-7788","Workshop Green LLM Usage","uba-ki-lab\u002Fworkshop-green-llm-usage",[116],[153,187,204,221,238,255],{"version":132,"repositoryCount":118,"occurrenceCount":118,"ageDays":154,"advisoryIds":155,"metadata":156},605,[90,91,92,93,94,95,96,97,98,99],{"state":157,"checkedAt":158,"publishedAt":159,"deprecated":46,"deprecatedReason":84,"licenses":160,"advisoryIds":161,"links":169,"relatedProjects":176,"attestations":182,"verifiedAttestation":100,"projectStatus":186},"resolved","2026-07-20T03:19:50.101Z","2024-11-22T03:06:27Z",[88],[90,91,92,93,162,94,95,96,97,98,99,163,164,165,166,167,168],"GHSA-fqwm-6jpj-5wxc","PYSEC-2026-140","PYSEC-2026-1974","PYSEC-2026-2287","PYSEC-2026-3387","PYSEC-2026-3388","PYSEC-2026-3389",[170,173],{"label":171,"url":172},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"label":174,"url":175},"ATTESTATION","https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ftornado\u002F6.4.2\u002Ftornado-6.4.2-cp38-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl\u002Fprovenance",[177,180],{"id":178,"relationType":171,"relationProvenance":179},"github.com\u002Ftornadoweb\u002Ftornado","UNVERIFIED_METADATA",{"id":178,"relationType":171,"relationProvenance":181},"PYPI_PUBLISH_ATTESTATION",[183],{"type":184,"url":175,"verified":100,"sourceRepository":172,"commit":185},"https:\u002F\u002Fdocs.pypi.org\u002Fattestations\u002Fpublish\u002Fv1","a5ecfab15e52202a46d34638aad93cddca86d87b","active",{"version":125,"repositoryCount":32,"occurrenceCount":32,"ageDays":188,"advisoryIds":189,"metadata":190},423,[90,91,93,94,95,96,97,98,99],{"state":157,"checkedAt":158,"publishedAt":191,"deprecated":46,"deprecatedReason":84,"licenses":192,"advisoryIds":193,"links":194,"relatedProjects":198,"attestations":201,"verifiedAttestation":100,"projectStatus":186},"2025-05-22T18:15:27Z",[88],[90,91,93,162,94,95,96,97,98,99,163,165,166,167,168],[195,196],{"label":171,"url":172},{"label":174,"url":197},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ftornado\u002F6.5.1\u002Ftornado-6.5.1-cp39-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl\u002Fprovenance",[199,200],{"id":178,"relationType":171,"relationProvenance":179},{"id":178,"relationType":171,"relationProvenance":181},[202],{"type":184,"url":197,"verified":100,"sourceRepository":172,"commit":203},"b5586f3f2956308a9dff1fba2c3ddbbbe1ab29d0",{"version":116,"repositoryCount":118,"occurrenceCount":118,"ageDays":205,"advisoryIds":206,"metadata":207},345,[90,91,93,94,95,96,97,98,99],{"state":157,"checkedAt":158,"publishedAt":208,"deprecated":46,"deprecatedReason":84,"licenses":209,"advisoryIds":210,"links":211,"relatedProjects":215,"attestations":218,"verifiedAttestation":100,"projectStatus":186},"2025-08-08T18:26:50Z",[88],[90,91,93,162,94,95,96,97,98,99,163,165,166,167,168],[212,213],{"label":171,"url":172},{"label":174,"url":214},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ftornado\u002F6.5.2\u002Ftornado-6.5.2-cp39-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl\u002Fprovenance",[216,217],{"id":178,"relationType":171,"relationProvenance":179},{"id":178,"relationType":171,"relationProvenance":181},[219],{"type":184,"url":214,"verified":100,"sourceRepository":172,"commit":220},"547e6d86972238f1f5333a85f12b17fb33626899",{"version":139,"repositoryCount":32,"occurrenceCount":32,"ageDays":222,"advisoryIds":223,"metadata":224},216,[90,91,93,94,95,96],{"state":157,"checkedAt":158,"publishedAt":225,"deprecated":46,"deprecatedReason":84,"licenses":226,"advisoryIds":227,"links":228,"relatedProjects":232,"attestations":235,"verifiedAttestation":100,"projectStatus":186},"2025-12-15T19:20:53Z",[88],[90,91,93,162,94,95,96,163,165,166,167,168],[229,230],{"label":171,"url":172},{"label":174,"url":231},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ftornado\u002F6.5.4\u002Ftornado-6.5.4-cp39-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl\u002Fprovenance",[233,234],{"id":178,"relationType":171,"relationProvenance":179},{"id":178,"relationType":171,"relationProvenance":181},[236],{"type":184,"url":231,"verified":100,"sourceRepository":172,"commit":237},"63d4df4eefa6750bb14efa1ebffe67b8c54fbad4",{"version":117,"repositoryCount":32,"occurrenceCount":32,"ageDays":239,"advisoryIds":240,"metadata":241},131,[90,93,94,95],{"state":157,"checkedAt":158,"publishedAt":242,"deprecated":46,"deprecatedReason":84,"licenses":243,"advisoryIds":244,"links":245,"relatedProjects":249,"attestations":252,"verifiedAttestation":100,"projectStatus":186},"2026-03-10T21:30:48Z",[88],[90,93,94,95,166,167,168],[246,247],{"label":171,"url":172},{"label":174,"url":248},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ftornado\u002F6.5.5\u002Ftornado-6.5.5-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl\u002Fprovenance",[250,251],{"id":178,"relationType":171,"relationProvenance":179},{"id":178,"relationType":171,"relationProvenance":181},[253],{"type":184,"url":248,"verified":100,"sourceRepository":172,"commit":254},"7d6465056ceb7a054b3f64cf1c18271753b10482",{"version":108,"repositoryCount":32,"occurrenceCount":109,"ageDays":63,"advisoryIds":256,"metadata":257},[],{"state":157,"checkedAt":158,"publishedAt":258,"deprecated":46,"deprecatedReason":84,"licenses":259,"advisoryIds":260,"links":261,"relatedProjects":265,"attestations":268,"verifiedAttestation":100,"projectStatus":186},"2026-06-08T17:34:41Z",[88],[],[262,263],{"label":171,"url":172},{"label":174,"url":264},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Ftornado\u002F6.5.7\u002Ftornado-6.5.7-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl\u002Fprovenance",[266,267],{"id":178,"relationType":171,"relationProvenance":179},{"id":178,"relationType":171,"relationProvenance":181},[269],{"type":184,"url":264,"verified":100,"sourceRepository":172,"commit":270},"48fc2d43d1f48b8b3b0be5dcf6a7634c6f45b1c4",{"occurrences":272,"occurrenceCount":85},[273,280,287,292,296,302,308,316,321,328],{"id":274,"repositoryId":120,"repositorySlug":121,"repositoryName":122,"repositoryPathWithNamespace":123,"ecosystem":82,"name":83,"identity":81,"version":125,"versionKey":275,"direct":84,"development":84,"sourceKind":276,"filePath":55,"blobSha":277,"sourceUrl":278,"commitSha":279},"component:0ebc7f5aeae55a8fc846df38","pypi:tornado@6.5.1","uv-lock","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba",{"id":281,"repositoryId":103,"repositorySlug":104,"repositoryName":105,"repositoryPathWithNamespace":106,"ecosystem":82,"name":83,"identity":81,"version":108,"versionKey":282,"direct":84,"development":84,"sourceKind":276,"filePath":283,"blobSha":284,"sourceUrl":285,"commitSha":286},"component:25284362925a0f2ac3a8d70f","pypi:tornado@6.5.7","mucgpt-assistant-service\u002Fuv.lock","36b26ae58598809148cf87cffcc3b67380e8b928","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8\u002Fmucgpt-assistant-service\u002Fuv.lock","46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8",{"id":288,"repositoryId":103,"repositorySlug":104,"repositoryName":105,"repositoryPathWithNamespace":106,"ecosystem":82,"name":83,"identity":81,"version":108,"versionKey":282,"direct":84,"development":84,"sourceKind":276,"filePath":289,"blobSha":290,"sourceUrl":291,"commitSha":286},"component:ea9ab0d043bbd9de3e117f21","mucgpt-core-service\u002Fuv.lock","8bf6980137a09f5692c9e62798298a2cd9122a99","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8\u002Fmucgpt-core-service\u002Fuv.lock",{"id":293,"repositoryId":103,"repositorySlug":104,"repositoryName":105,"repositoryPathWithNamespace":106,"ecosystem":82,"name":83,"identity":81,"version":108,"versionKey":282,"direct":84,"development":84,"sourceKind":276,"filePath":55,"blobSha":294,"sourceUrl":295,"commitSha":286},"component:127e332d31295197d407a5e4","77989726989ea666c8557d105b2bf2c064daa319","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8\u002Fuv.lock",{"id":297,"repositoryId":127,"repositorySlug":128,"repositoryName":129,"repositoryPathWithNamespace":130,"ecosystem":82,"name":83,"identity":81,"version":132,"versionKey":298,"direct":84,"development":84,"sourceKind":276,"filePath":55,"blobSha":299,"sourceUrl":300,"commitSha":301},"component:81e1d700a9a12b3a5200a276","pypi:tornado@6.4.2","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"id":303,"repositoryId":134,"repositorySlug":135,"repositoryName":136,"repositoryPathWithNamespace":137,"ecosystem":82,"name":83,"identity":81,"version":139,"versionKey":304,"direct":84,"development":84,"sourceKind":276,"filePath":55,"blobSha":305,"sourceUrl":306,"commitSha":307},"component:88e1d813595963166665c683","pypi:tornado@6.5.4","047f47304acd18a48770c101f5a8383cd19bb134","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fuv.lock","9aa07461b879a6161b7e901ea4c2a382b8f1b4ae",{"id":309,"repositoryId":111,"repositorySlug":112,"repositoryName":113,"repositoryPathWithNamespace":114,"ecosystem":82,"name":83,"identity":81,"version":116,"versionKey":310,"direct":84,"development":46,"sourceKind":311,"filePath":312,"blobSha":313,"sourceUrl":314,"commitSha":315},"component:fe3e87d6682474c2a27cc6b4","pypi:tornado@6.5.2","poetry-lock","blp_streamlit_pipeline\u002Fsrc\u002Fext\u002Fstreamlit-draw-image-mask\u002Fpoetry.lock","40fa29ec0b8e6e3bfbf4c2ff77526dd4038e0299","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung\u002F-\u002Fblob\u002F1d70807d48a8fae19711b10422c3417ab5d05d0f\u002Fblp_streamlit_pipeline\u002Fsrc\u002Fext\u002Fstreamlit-draw-image-mask\u002Fpoetry.lock","1d70807d48a8fae19711b10422c3417ab5d05d0f",{"id":317,"repositoryId":111,"repositorySlug":112,"repositoryName":113,"repositoryPathWithNamespace":114,"ecosystem":82,"name":83,"identity":81,"version":117,"versionKey":318,"direct":84,"development":46,"sourceKind":311,"filePath":56,"blobSha":319,"sourceUrl":320,"commitSha":315},"component:bfc165cd163f99483cdc3aa8","pypi:tornado@6.5.5","6b17710ca48cf83827a909c320d60853c75d7960","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002Fki-bauleitplaene\u002Fsmartplanai-anwendung\u002F-\u002Fblob\u002F1d70807d48a8fae19711b10422c3417ab5d05d0f\u002Fpoetry.lock",{"id":322,"repositoryId":141,"repositorySlug":142,"repositoryName":143,"repositoryPathWithNamespace":144,"ecosystem":82,"name":83,"identity":81,"version":132,"versionKey":298,"direct":84,"development":84,"sourceKind":323,"filePath":324,"blobSha":325,"sourceUrl":326,"commitSha":327},"component:647ae8d2994ca9e39738a930","sbom-json","sbom.json","bce3149701e5462f1af80e9221c0e2967402d606","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fstrahlenexposition\u002F-\u002Fblob\u002F1dd9cd8ca823a7998b729adce6957848cf241d54\u002Fsbom.json","1dd9cd8ca823a7998b729adce6957848cf241d54",{"id":329,"repositoryId":147,"repositorySlug":148,"repositoryName":149,"repositoryPathWithNamespace":150,"ecosystem":82,"name":83,"identity":81,"version":116,"versionKey":310,"direct":84,"development":84,"sourceKind":276,"filePath":55,"blobSha":330,"sourceUrl":331,"commitSha":332},"component:96eb4b63e8d21246865d2b37","bf2ad06a6324960d4a6a7a91340009e907848d0a","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fworkshop-green-llm-usage\u002F-\u002Fblob\u002Fd72ec94b58729e8b5e32caa9484867ec13add189\u002Fuv.lock","d72ec94b58729e8b5e32caa9484867ec13add189",{"repositories":334,"vulnerabilities":349},[335,337,339,341,343,345,347],{"id":103,"slug":104,"name":105,"pathWithNamespace":106,"versions":336,"evidenceCount":109},[108],{"id":111,"slug":112,"name":113,"pathWithNamespace":114,"versions":338,"evidenceCount":118},[116,117],{"id":120,"slug":121,"name":122,"pathWithNamespace":123,"versions":340,"evidenceCount":32},[125],{"id":127,"slug":128,"name":129,"pathWithNamespace":130,"versions":342,"evidenceCount":32},[132],{"id":134,"slug":135,"name":136,"pathWithNamespace":137,"versions":344,"evidenceCount":32},[139],{"id":141,"slug":142,"name":143,"pathWithNamespace":144,"versions":346,"evidenceCount":32},[132],{"id":147,"slug":148,"name":149,"pathWithNamespace":150,"versions":348,"evidenceCount":32},[116],[350,376,404,429,452,472,487,514,535,552],{"id":90,"slug":351,"dossier":46,"summary":352,"aliases":353,"sourceIds":355,"published":356,"modified":357,"checkedAt":7,"severity":358,"references":362,"versionKeys":375,"packageCount":32,"repositoryCount":86},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[354,166],"CVE-2026-49853",[90,166],"2026-06-15T20:20:00Z","2026-07-13T16:42:55.378655356Z",[359],{"type":360,"score":361},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[363,366,368,370,373],{"type":364,"url":365},"WEB","https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":367,"url":172},"PACKAGE",{"type":367,"url":369},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":371,"url":372},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":371,"url":374},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[298,275,310,304,318],{"id":91,"slug":377,"dossier":46,"summary":378,"aliases":379,"sourceIds":381,"published":382,"modified":383,"checkedAt":7,"severity":384,"references":391,"versionKeys":403,"packageCount":32,"repositoryCount":86},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[380,162,165],"CVE-2026-35536",[91,162,165],"2026-03-11T22:17:00Z","2026-07-13T16:45:06.531920939Z",[385,387,389],{"type":360,"score":386},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":360,"score":388},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":360,"score":390},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[392,394,396,397,399,401],{"type":371,"url":393},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":364,"url":395},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":367,"url":172},{"type":364,"url":398},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":371,"url":400},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":371,"url":402},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[298,275,310,304],{"id":92,"slug":405,"dossier":46,"summary":406,"aliases":407,"sourceIds":409,"published":410,"modified":411,"checkedAt":7,"severity":412,"references":415,"versionKeys":428,"packageCount":32,"repositoryCount":118},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[408,164],"CVE-2025-47287",[92,164],"2025-05-16T14:12:40Z","2026-07-07T17:56:45.268719923Z",[413],{"type":360,"score":414},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[416,418,420,422,423,425,426],{"type":364,"url":417},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":371,"url":419},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":364,"url":421},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":367,"url":172},{"type":364,"url":424},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":367,"url":369},{"type":371,"url":427},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[298],{"id":93,"slug":430,"dossier":46,"summary":431,"aliases":432,"sourceIds":434,"published":435,"modified":436,"checkedAt":7,"severity":437,"references":440,"versionKeys":451,"packageCount":32,"repositoryCount":86},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[433,167],"CVE-2026-49854",[93,167],"2026-06-12T18:30:19Z","2026-07-13T16:43:34.663472817Z",[438],{"type":360,"score":439},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[441,443,444,446,447,449],{"type":364,"url":442},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":367,"url":172},{"type":364,"url":445},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":367,"url":369},{"type":371,"url":448},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":371,"url":450},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[298,275,310,304,318],{"id":94,"slug":453,"dossier":46,"summary":454,"aliases":455,"sourceIds":457,"published":458,"modified":459,"checkedAt":7,"severity":460,"references":462,"versionKeys":471,"packageCount":32,"repositoryCount":86},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[456,168],"CVE-2026-49855",[94,168],"2026-06-15T20:19:28Z","2026-07-13T16:43:27.241564365Z",[461],{"type":360,"score":414},[463,465,466,467,469],{"type":364,"url":464},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":367,"url":172},{"type":367,"url":369},{"type":371,"url":468},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":371,"url":470},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[298,275,310,304,318],{"id":95,"slug":473,"dossier":46,"summary":474,"aliases":475,"sourceIds":476,"published":477,"modified":478,"checkedAt":7,"severity":479,"references":482,"versionKeys":486,"packageCount":32,"repositoryCount":86},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[],[95],"2026-06-15T20:37:24Z","2026-06-16T22:59:25.768721886Z",[480],{"type":360,"score":481},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[483,485],{"type":364,"url":484},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":367,"url":172},[298,275,310,304,318],{"id":96,"slug":488,"dossier":46,"summary":489,"aliases":490,"sourceIds":492,"published":493,"modified":494,"checkedAt":7,"severity":495,"references":500,"versionKeys":513,"packageCount":32,"repositoryCount":86},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[491,163],"CVE-2026-31958",[96,163],"2026-03-11T20:16:16.617Z","2026-06-08T20:00:14.385003861Z",[496,497],{"type":360,"score":414},{"type":498,"score":499},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[501,503,505,507,509,510,511],{"type":371,"url":502},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":371,"url":504},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":364,"url":506},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":364,"url":508},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":367,"url":172},{"type":364,"url":398},{"type":364,"url":512},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[298,275,310,304],{"id":97,"slug":515,"dossier":46,"summary":84,"aliases":516,"sourceIds":519,"published":520,"modified":521,"checkedAt":7,"severity":522,"references":525,"versionKeys":533,"packageCount":32,"repositoryCount":534},"pysec-2025-265-33beac08",[517,518],"CVE-2025-67724","GHSA-pr2v-jx2c-wg9f",[97],"2025-12-12T06:15:41.213Z","2026-07-13T07:15:44.068555841Z",[523],{"type":360,"score":524},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[526,528,530],{"type":371,"url":527},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",{"type":371,"url":529},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":531,"url":532},"FIX","https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",[298,275,310],5,{"id":98,"slug":536,"dossier":46,"summary":84,"aliases":537,"sourceIds":540,"published":541,"modified":542,"checkedAt":7,"severity":543,"references":545,"versionKeys":551,"packageCount":32,"repositoryCount":534},"pysec-2025-266-c9802ae6",[538,539],"CVE-2025-67725","GHSA-c98p-7wgm-6p64",[98],"2025-12-12T06:15:41.380Z","2026-07-13T07:15:44.064352714Z",[544],{"type":360,"score":414},[546,547,549],{"type":371,"url":527},{"type":371,"url":548},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":531,"url":550},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",[298,275,310],{"id":99,"slug":553,"dossier":46,"summary":84,"aliases":554,"sourceIds":557,"published":558,"modified":559,"checkedAt":7,"severity":560,"references":562,"versionKeys":567,"packageCount":32,"repositoryCount":534},"pysec-2025-267-ca9685ba",[555,556],"CVE-2025-67726","GHSA-jhmp-mqwm-3gq8",[99],"2025-12-12T07:15:44.920Z","2026-07-13T07:15:45.375541292Z",[561],{"type":360,"score":414},[563,564,566],{"type":371,"url":527},{"type":371,"url":565},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":531,"url":550},[298,275,310],1784558564033]