CVE-2026-115927: Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks

Severity: medium. ### Summary When Tornado reads an HTTP/1.1 body that uses chunked transfer encoding, it processes all chunks that have already arrived without yielding to the event loop. A client can send a body made of millions of 1-byte chunks, which blocks the event loop (and therefore every other connection se

Читать первоисточник →