Kludex python-multipart vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20267

Newest CVEs

• CVE-2026-53540

  Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory

  Kludex · python-multipart

  Low3.7
• CVE-2026-53537

  Python-Multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters

  Kludex · python-multipart

  Low3.7
• CVE-2026-53538

  Python-Multipart: Semicolon treated as querystring field separator enables parameter smuggling

  Kludex · python-multipart

  Low3.7
• CVE-2026-53539

  Python-Multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

  Kludex · python-multipart

  High7.5
• CVE-2026-42561

  Python-Multipart: Denial of Service via unbounded multipart part headers

  Kludex · python-multipart

  High7.5
• CVE-2026-40347

  Python-Multipart affected by Denial of Service via large multipart preamble or epilogue data

  Kludex · python-multipart

  Medium5.3
• CVE-2026-24486

  Python-Multipart has Arbitrary File Write via Non-Default Configuration

  Kludex · python-multipart

  High8.6
• CVE-2024-53981

  python-multipart has a Denial of service (DoS) via deformation `multipart/form-data` boundary

  Kludex · python-multipart

  High7.5
• CVE-2024-24762

  python-multipart vulnerable to content-type header Regular expression Denial of Service

  Kludex · python-multipart

  High7.5