PY
Product
python-multipart
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 2Low 2
Watch
Add python-multipart to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-53539 | 7.5 | Jun 22 | Python-Multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service Affected: < 0.0.30 |
| CVE-2026-42561 | 7.5 | May 13 | Python-Multipart: Denial of Service via unbounded multipart part headers Affected: < 0.0.27 |
| CVE-2026-53537 | 5.3 | Jun 22 | Python-Multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters Affected: < 0.0.30 |
| CVE-2026-40347 | 5.3 | Apr 17 | Python-Multipart affected by Denial of Service via large multipart preamble or epilogue data Affected: < 0.0.26 |
| CVE-2026-53540 | 3.7 | Jun 22 | Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory Affected: < 0.0.31 |
| CVE-2026-53538 | 3.7 | Jun 22 | Python-Multipart: Semicolon treated as querystring field separator enables parameter smuggling Affected: < 0.0.30 |
Showing 6