StackRadarChart IndexLive demo

GHSA-753j-mpmx-qq6g

Medium

Advisory

Published 6 Jun 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 63; of 17,781 indexed, latest versions
Container images: 68; deployed by those charts
Fix available: 1 of 1; affected package

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in tornado

Carried by container images the latest versions of 63 of 17,781 indexed charts deploy, on 68 images.

Affected package	Affected versions	Fixed in	Images
tornadopypi	2.4.1, 4.5.3, 5.1.1, 6.0.2+6 more	6.4.1	68

OSV records: GHSA-753j-mpmx-qq6g

Charts affected

63 by stars

Chart

Latest

Affected images

Radar Score

esphomeretsamedoc

1 of 1 See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry GHSA-753j-mpmx-qq6g.

Container image	Digest	Package	Fixed in
esphome/esphome :2024.3.0	9ab8cc88b28c	tornado@6.4	6.4.1

Open the chart page →

7,431

1 of 7 See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry GHSA-753j-mpmx-qq6g.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-productpage-v1 :1.14.0	22a0410f35a8	tornado@4.5.3	6.4.1

Open the chart page →

20,462

istio-bookinforgnu

1 of 7 See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry GHSA-753j-mpmx-qq6g.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-productpage-v1 :1.14.0	22a0410f35a8	tornado@4.5.3	6.4.1

Open the chart page →

20,462

airflowsb-helm-charts

1 of 1 See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry GHSA-753j-mpmx-qq6g.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.1	e5560ad0b86e	tornado@6.4	6.4.1

Open the chart page →

10,209

seldon-deployseldon

1 of 2 See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry GHSA-753j-mpmx-qq6g.

Container image	Digest	Package	Fixed in
seldonio/seldon-request-logger :1.11.2	4e985d2006a8	tornado@6.1	6.4.1

Open the chart page →

21,997

restful-distributed-lock-managerstakater

1 of 1 See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry GHSA-753j-mpmx-qq6g.

Container image	Digest	Package	Fixed in
stakater/restful-distributed-lock-manager :0.5.3	4f8e409f30c2	tornado@2.4.1	6.4.1

Open the chart page →

3,116

netforge-besvtech

1 of 3 See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry GHSA-753j-mpmx-qq6g.

Container image	Digest	Package	Fixed in
mher/flower :2.0	51c3c3db5be3	tornado@6.3.3	6.4.1

Open the chart page →

4,674

icinga2-reportsvtech-public-helm-charts

1 of 1 See more

icinga2-report svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry GHSA-753j-mpmx-qq6g.

Container image	Digest	Package	Fixed in
trungkien210493/icinga2-report :v1.7.1	2cc8c3763c4c	tornado@5.1.1	6.4.1

Open the chart page →

1,779

tezos-nodetezos-node

1 of 4 See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry GHSA-753j-mpmx-qq6g.

Container image	Digest	Package	Fixed in
oxheadalpha/tezos-k8s-utils :5.3.4	d9faed45bf1c	tornado@6.1	6.4.1

Open the chart page →

5,321

synapsetranhailong

1 of 2 See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry GHSA-753j-mpmx-qq6g.

Container image	Digest	Package	Fixed in
matrixdotorg/synapse :v1.78.0	def97fd537d8	tornado@6.1	6.4.1

Open the chart page →

3,164

jupyterhubuninettsigma2

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry GHSA-753j-mpmx-qq6g.

Container image	Digest	Package	Fixed in
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	tornado@6.2	6.4.1

Open the chart page →

8,607

1 of 1 See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry GHSA-753j-mpmx-qq6g.

Container image	Digest	Package	Fixed in
josh5/unmanic :0.2.6	4d49c4816260	tornado@6.0.2	6.4.1

Open the chart page →

9,347

webapp-chartwebappchart

1 of 1 See more

webapp-chart webappchart 1.0.0

1 of the 1 container images this version deploys carry GHSA-753j-mpmx-qq6g.

Container image	Digest	Package	Fixed in
amagdi888/my-repo :hello-app	d8a10fc8faf6	tornado@5.1.1	6.4.1

Open the chart page →

1,201

Container images carrying it

68 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
oxheadalpha/tezos-k8s-utils :5.3.4	d9faed45bf1c	tornado@6.1	6.4.1	1
pangeo/base-notebook :2024.01.15	5fbe688a4f80	tornado@6.3.3	6.4.1	1
roadiehq/community-backstage-image :latest	ef355bf5b639	tornado@5.1.1	6.4.1	1
robmarkcole/deepstack-ui :latest	410275726459	tornado@6.1	6.4.1	1
seldonio/seldon-request-logger :1.11.2	4e985d2006a8	tornado@6.1	6.4.1	1
stakater/restful-distributed-lock-manager :0.5.3	4f8e409f30c2	tornado@2.4.1	6.4.1	1
tensorflow/tensorflow :1.6.0-devel	1e3172090703	tornado@4.5.3	6.4.1	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	tornado@4.5.3	6.4.1	1
trungkien210493/icinga2-report :v1.7.1	2cc8c3763c4c	tornado@5.1.1	6.4.1	1
ghcr.io/cosmo-tech/cosmotech-copilot-api :latest	a2be95de450c	tornado@6.4	6.4.1	1
ghcr.io/dask/dask :2024.1.0	080150de7d86	tornado@6.3.3	6.4.1	1
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	tornado@6.3.3	6.4.1	1
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	tornado@6.1	6.4.1	1
ghcr.io/home-assistant/home-assistant :2023.11.3	feffc0b8227d	tornado@6.3.3	6.4.1	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	tornado@6.3.3	6.4.1	1
quay.io/jupyterhub/k8s-hub :3.2.1	2528c6e57587	tornado@6.3.3	6.4.1	1
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	tornado@6.2	6.4.1	1
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	tornado@6.4	6.4.1	1