Skip to content

Update dependency tornado to v6.5.9 - #14

Open
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/tornado-6.x
Open

mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/tornado-6.x

Conversation

@mend-for-github-com

@mend-for-github-com mend-for-github-com Bot commented Aug 26, 2026 •

Copy link
Copy Markdown

This PR contains the following updates:

Package Update Change
tornado (source) minor ==6.4.2 → ==6.5.9

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability
High High 7.5 CVE-2025-47287
High High 7.5 CVE-2025-67725
High High 7.5 CVE-2025-67726
High High 7.5 CVE-2026-103262
High High 7.5 CVE-2026-31958
High High 7.5 CVE-2026-82397
High High 7.5 CVE-2026-91990
High High 7.2 CVE-2026-35536
Medium Medium 5.9 CVE-2026-103263
Medium Medium 5.9 CVE-2026-91992
Medium Medium 5.4 CVE-2025-67724
Medium Medium 5.3 CVE-2026-103261
Medium Medium 5.3 CVE-2026-49854

Release Notes

tornadoweb/tornado (tornado)

v6.5.9

Compare Source

v6.5.8

Compare Source

v6.5.7

Compare Source

v6.5.6

Compare Source

v6.5.5

Compare Source

v6.5.4

Compare Source

v6.5.3

Compare Source

v6.5.2

Compare Source

v6.5.1

Compare Source

v6.5

Compare Source


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com Bot added the security fix Security fix generated by Mend label Aug 26, 2026
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/tornado-6.x branch from 8419ffc to f4bcaef Compare September 1, 2026 18:31
@mend-for-github-com mend-for-github-com Bot changed the title Update dependency tornado to v6.5.6 Update dependency tornado to v6.5.8 Sep 1, 2026
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/tornado-6.x branch from f4bcaef to 17008f8 Compare October 6, 2026 00:58
@mend-for-github-com mend-for-github-com Bot changed the title Update dependency tornado to v6.5.8 Update dependency tornado to v6.5.9 Oct 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants