CLEANSTART-2026-ZF35856: Tornado before 6
Published Nov 12, 2026
·Updated
Security vulnerability affects the litellm-database package. Tornado before 6.
Affected Software
1 affected componentFixes available
cleanstart/litellm-database<1.97.1-r1
1.97.1-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/litellm-databaseto a version that resolves this vulnerability.Fixed in 1.97.1-r1
Event History
Nov 12, 2026
Advisory Published
via OSV·12:40 AM
Data Sourced
via OSV·12:40 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Can an attacker exploit this without credentials or user interaction?
The vector is network-based, and the assessment indicates no privileges or user interaction are required. Exploitation nevertheless has high attack complexity.
2
What is the expected impact if exploitation succeeds?
The assessed impact is high on availability and low on confidentiality. No integrity impact is indicated.