TI-2026-38613 CVE-2026-53540 · GHSA-v9pg-7xvm-68hf
Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory
Priority LOW 18
Python-Multipart is a streaming multipart parser for Python.
Vulnerabilities
7 records
TI-2026-38610 CVE-2026-53537 · GHSA-vffw-93wf-4j4q
Python-Multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters
Priority LOW 24
Python-Multipart is a streaming multipart parser for Python.
TI-2026-38611 CVE-2026-53538 · GHSA-6jv3-5f52-599m
Python-Multipart: Semicolon treated as querystring field separator enables parameter smuggling
Priority LOW 17
Python-Multipart is a streaming multipart parser for Python.
TI-2026-38612 CVE-2026-53539 · GHSA-5rvq-cxj2-64vf
Python-Multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service
Priority LOW 39
Python-Multipart is a streaming multipart parser for Python.
TI-2026-29122 CVE-2026-40347 · GHSA-mj87-hwqh-73pj
Python-Multipart affected by Denial of Service via large multipart preamble or epilogue data
Priority LOW 30
Python-Multipart is a streaming multipart parser for Python.
TI-2026-19738 CVE-2026-24486 · GHSA-wp53-j4wj-2cfg
Python-Multipart has Arbitrary File Write via Non-Default Configuration
Priority MEDIUM 42
Python-Multipart is a streaming multipart parser for Python.
TI-2024-16279 CVE-2024-24762 · GHSA-2jv5-9r88-3w3p
python-multipart vulnerable to content-type header Regular expression Denial of Service
Priority HIGH 72
`python-multipart` is a streaming multipart parser for Python.