NetBSD 9.4 — py-tornado — multiple vulnerabilities (6 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-28476 CVE-2025-67724 CVE-2014-9720 CVE-2025-67725 CVE-2025-67726 CVE-2026-31958 Upstream summary: pkgsrc audit-packages flagged py{27,36,37,38,39}-tornado-[0-9]* for vulnerability class 'cache-poisoning'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-28476 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]