TI-2024-16279 CVE-2024-24762 · GHSA-2jv5-9r88-3w3p
python-multipart vulnerable to content-type header Regular expression Denial of Service
Priority HIGH 72
`python-multipart` is a streaming multipart parser for Python.
Fastapiexpert
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Fastapiexpert records in CISA KEVNo Fastapiexpert vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Python-multipart · all components
TI-2026-19738 CVE-2026-24486 · GHSA-wp53-j4wj-2cfg
Python-Multipart has Arbitrary File Write via Non-Default Configuration
Priority MEDIUM 42
Python-Multipart is a streaming multipart parser for Python.
TI-2026-38612 CVE-2026-53539 · GHSA-5rvq-cxj2-64vf
Python-Multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service
Priority LOW 39
Python-Multipart is a streaming multipart parser for Python.
TI-2026-29122 CVE-2026-40347 · GHSA-mj87-hwqh-73pj
Python-Multipart affected by Denial of Service via large multipart preamble or epilogue data
Priority LOW 30
Python-Multipart is a streaming multipart parser for Python.
TI-2026-38610 CVE-2026-53537 · GHSA-vffw-93wf-4j4q
Python-Multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters
Priority LOW 24
Python-Multipart is a streaming multipart parser for Python.
TI-2026-38613 CVE-2026-53540 · GHSA-v9pg-7xvm-68hf
Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory
Priority LOW 18
Python-Multipart is a streaming multipart parser for Python.
TI-2026-38611 CVE-2026-53538 · GHSA-6jv3-5f52-599m
Python-Multipart: Semicolon treated as querystring field separator enables parameter smuggling
Priority LOW 17
Python-Multipart is a streaming multipart parser for Python.