python-multipart vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-53539Highpython-multipart: python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of…CVE-2026-53540Lowpython-multipart: python-multipart: Negative Content-Length in parse_form buffers the entire body in memory CVE-2026-53538Lowpython-multipart: python-multipart: Semicolon treated as querystring field separator enables parameter smuggling CVE-2026-53537Lowpython-multipart: python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters CVE-2026-42561Highpython-multipart: python-multipart has Denial of Service via unbounded multipart part headers CVE-2026-40347Mediumpython-multipart: python-multipart affected by Denial of Service via large multipart preamble or epilogue data CVE-2026-24486Highpython-multipart: Python-Multipart has Arbitrary File Write via Non-Default Configuration CVE-2024-53981Highpython-multipart: Denial of service (DoS) via deformation `multipart/form-data` boundary CVE-2024-24762Highpython-multipart: python-multipart vulnerable to Content-Type Header ReDoS

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo