{"id":"ghsa-ghsa-pw9p-v7r6-gx4p","seq":2056905,"kind":"advisory","title":"Tornado: Open redirect in RedirectHandler via protocol-relative URLs","url":"https://github.com/advisories/GHSA-pw9p-v7r6-gx4p","permalink":"https://vulnpulse.app/items/ghsa-ghsa-pw9p-v7r6-gx4p","summary":"影響: pip:tornado < 6.6 → 6.6\ntornado.web.RedirectHandler builds its target URL by substituting parts of the request path into a template. Depending on where those substitutions appear in the template, an attacker can craft a request that redirects to a host of their choosing. This creates an open redirect on the application's domain, which can be used in phishing. Impact Applications are affected if they use RedirectHandler with a URL template where a regex capture group can influence the scheme or host of the redirect. Th…","severity":"low","techs":["python"],"cves":["CVE-2026-116578"],"tags":["GHSA-pw9p-v7r6-gx4p","tornado"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-28T22:43:45.000Z","fetched_at":"2026-10-29T00:48:52.653Z"}