Python-multipart (Kludex) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-06-22. Vendor: Kludex.

CVEs of Python-multipart

• CVE-2026-53540 - CVSS 3.7 (low), 2026-06-22: Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parse_form() did not validate the Content-Length header before using it to bound…
• CVE-2026-53537 - CVSS 5.3 (medium), 2026-06-22: Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, parse_options_header parsed Content-Disposition (and Content-Type) headers with…
• CVE-2026-53538 - CVSS 3.7 (low), 2026-06-22: Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, QuerystringParser treated ; as a field separator in…
• CVE-2026-53539 - CVSS 7.5 (high), 2026-06-22: Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, when parsing application/x-www-form-urlencoded bodies, QuerystringParser located…
• CVE-2026-42561 - CVSS 7.5 (high), 2026-05-13: Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.27, python-multipart has a denial of service vulnerability in multipart part header…
• CVE-2026-40347 - CVSS 5.3 (medium), 2026-04-18: Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have a denial of service vulnerability when parsing crafted…
• CVE-2026-24486 - CVSS 8.6 (high), 2026-01-27: Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default…
• CVE-2024-53981 - CVSS 7.5 (high), 2024-12-02: python-multipart is a streaming multipart parser for Python. When parsing form data, python-multipart skips line breaks (CR \r or LF \n) in front of the first…
• CVE-2024-24762 - CVSS 7.5 (high), 2024-02-05: `python-multipart` is a streaming multipart parser for Python. When using form data, `python-multipart` uses a Regular Expression to parse the HTTP…