Detections
Analytics
SCA: security update for tornado (GHSA-pw6j-qg29-8w7f)
high Tenable Self-Hosted Container Security Plugin ID 443256
Description
Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuseSolution
Update the tornado library and its related packages to version 6.5.7 or later.See Also
Plugin Details
Severity: High
ID: 443256
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 6/16/2026
Updated: 6/16/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 6/15/2026
Vulnerability Publication Date: 6/15/2026