kludex/python-multipart Security Advisories | GitStock

high2026-06-15

python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

GHSA-5rvq-cxj2-64vf · CVE-2026-53539

low2026-06-15

python-multipart: Negative Content-Length in parse_form buffers the entire body in memory

GHSA-v9pg-7xvm-68hf · CVE-2026-53540

low2026-06-15

python-multipart: Semicolon treated as querystring field separator enables parameter smuggling

GHSA-6jv3-5f52-599m · CVE-2026-53538

low2026-06-15

python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters

GHSA-vffw-93wf-4j4q · CVE-2026-53537

high2026-05-06

python-multipart has Denial of Service via unbounded multipart part headers

GHSA-pp6c-gr5w-3c5g · CVE-2026-42561

medium2026-04-15

python-multipart affected by Denial of Service via large multipart preamble or epilogue data

GHSA-mj87-hwqh-73pj · CVE-2026-40347

high2026-01-26

Python-Multipart has Arbitrary File Write via Non-Default Configuration

GHSA-wp53-j4wj-2cfg · CVE-2026-24486

high2024-12-02

Denial of service (DoS) via deformation `multipart/form-data` boundary

GHSA-59g5-xgcq-4qw3 · CVE-2024-53981

high2024-02-12

python-multipart vulnerable to Content-Type Header ReDoS

GHSA-2jv5-9r88-3w3p · CVE-2024-24762