Vulnerabilities
Report: CVE-2026-35536 - Tornado Cookie Attribute Injection Vulnerability - Guide
CVE ID :CVE-2026-35536 Published : April 3, 2026, 4:16 a.m. | 1 hour, 9 minutes ago Description :In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for crafted characters. Severity: 7.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...