VULNRABLE / Vulnerability / CVE-2026-49854

CVE-2026-49854

LOW tornado GHSA

CVSS Score

Severity

LOW

EPSS

Source

GHSA

Summary

Tornado has out-of-bounds memory access via C extension

What this means

CVE-2026-49854 is a low-severity vulnerability affecting tornado, rated CVSS 2. The EPSS model estimates a 0% probability of exploitation in the next 30 days. Published June 13, 2026.

View full advisory at GHSA →