CVE-2026-126347: CVE-2026-126347: Open Redirect via Triple-Slash Redirect Paths in Tornado RedirectHandler
CVE-2026-126347: Open Redirect via Triple-Slash Redirect Paths in Tornado RedirectHandler Vulnerability ID: CVE-2026-126347 CVSS Score: 3.1 Published: 2026-11-13 CVE-2026-126347 (GHSA-5cjw-f85j-cv6r) is an open redirect vulnerability (CWE-601) in Tornado, an asynchronous Python networking library and web framework. The flaw resides in tornado.web.RedirectHandler when dynamic URL redirection…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.