Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 0.1% on pypi.org
Top 0.1% downloads on pypi.org
Top 0.1% dependent packages on pypi.org
Top 0.1% dependent repos on pypi.org
Top 0.2% forks on pypi.org
Top 0.1% docker downloads on pypi.org

pypi.org : tornado

Tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed.

Registry - Source - Homepage - Documentation - JSON
purl: pkg:pypi/tornado
Keywords: asynchronous, python
License: Apache-2.0
Latest release: 9 months ago
First release: about 14 years ago
Dependent packages: 853
Dependent repositories: 113,286
Downloads: 39,767,997 last month
Stars: 21,384 on GitHub
Forks: 5,571 on GitHub
Docker dependents: 9,059
Docker downloads: 3,884,296,400
Total Commits: 3642
Committers: 447
Average commits per author: 8.148
Development Distribution Score (DDS): 0.359
More commit stats: commits.ecosyste.ms
See more repository details: repos.ecosyste.ms
Last synced: 1 day ago

Moderate

GSA_kwCzR0hTQS1mN2Z2LXY5cmgtcHJ2Y84AAfig

Tornado CRLF injection vulnerability
Ecosystems: pypi
Packages: tornado
Source: github
Published: about 2 years ago

Moderate

GSA_kwCzR0hTQS1xcHB2LWo3NmgtMnJweM4AA1Sz

Tornado vulnerable to HTTP request smuggling via improper parsing of `Content-Length` fields and chunk lengths
Ecosystems: pypi
Packages: tornado
Source: github
Published: 9 months ago

Moderate

GSA_kwCzR0hTQS1oajNmLTZnY3Atamc4as4AAzeO

Open redirect in Tornado
Ecosystems: pypi
Packages: tornado
Source: github
Published: 12 months ago

Moderate

GSA_kwCzR0hTQS04dnB3LW1ncGYtbXB2ds4AAgVX

Tornado XSRF cookie allows side-channel attack against TLS (BREACH attack)
Ecosystems: pypi
Packages: tornado
Source: github
Published: about 2 years ago