CVE-2026-49855 | tornadoweb Tornado up to 6.5.5 Decompression memory allocation (Nessus ID 345570)

A vulnerability has been found in tornadoweb Tornado up to 6.5.5 and classified as problematic. This issue affects some unknown processing of the component Decompression. Performing a manipulation results in uncontrolled memory allocation. This vulnerability was named CVE-2026-49855. The attack may be initiated remotely. There is no available... Weiterlesen