Package impact
PyPI / python-multipart
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-42561 | high | 7.5 | 7.5 | 16d ago | python-multipart has Denial of Service via unbounded multipart part headers | |||
| CVE-2026-40347 | unknown | — | — | 1mo ago | python-multipart affected by Denial of Service via large multipart preamble or epilogue data | |||
| CVE-2026-24486 | unknown | — | — | 4mo ago | Python-Multipart has Arbitrary File Write via Non-Default Configuration | |||
| CVE-2024-53981 | unknown | — | — | 2y ago | python-multipart is a streaming multipart parser for Python. When parsing form data, python-multipart skips line breaks (CR \r or LF \n) in front of the first boundary and any tailing bytes after the… | |||
| CVE-2024-24762 | unknown | — | — | 2y ago | FastAPI is a web framework for building APIs with Python 3.8+ based on standard Python type hints. When using form data, `python-multipart` uses a Regular Expression to parse the HTTP `Content-Type` … |