Python-multipart (Fastapiexpert) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 33 known versions, newest CVE from 2026-06-22. Vendor: Fastapiexpert.

CVEs of Python-multipart

• CVE-2026-53540 - CVSS 3.7 (low), 2026-06-22: Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parse_form() did not validate the Content-Length header before using it to bound…
• CVE-2026-53537 - CVSS 5.3 (medium), 2026-06-22: Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, parse_options_header parsed Content-Disposition (and Content-Type) headers with…
• CVE-2026-53538 - CVSS 3.7 (low), 2026-06-22: Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, QuerystringParser treated ; as a field separator in…
• CVE-2026-53539 - CVSS 7.5 (high), 2026-06-22: Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, when parsing application/x-www-form-urlencoded bodies, QuerystringParser located…
• CVE-2026-40347 - CVSS 5.3 (medium), 2026-04-18: Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have a denial of service vulnerability when parsing crafted…
• CVE-2026-24486 - CVSS 8.6 (high), 2026-01-27: Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default…
• CVE-2024-24762 - CVSS 7.5 (high), 2024-02-05: `python-multipart` is a streaming multipart parser for Python. When using form data, `python-multipart` uses a Regular Expression to parse the HTTP…