What’s Vulnerable › Products

Kludex python-multipart vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Kludex python-multipart version is affected

Latest Kludex python-multipart vulnerabilities

• CVE-2026-53540 — Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory (CVSS 3.7)
• CVE-2026-53539 — Python-Multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service (CVSS 7.5)
• CVE-2026-53538 — Python-Multipart: Semicolon treated as querystring field separator enables parameter smuggling (CVSS 3.7)
• CVE-2026-53537 — Python-Multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters (CVSS 5.3)
• CVE-2026-42561 — Python-Multipart: Denial of Service via unbounded multipart part headers (CVSS 7.5)
• CVE-2026-40347 — Python-Multipart affected by Denial of Service via large multipart preamble or epilogue data (CVSS 5.3)
• CVE-2026-24486 — Python-Multipart has Arbitrary File Write via Non-Default Configuration (CVSS 7.5)
• CVE-2024-24762 — python-multipart vulnerable to content-type header Regular expression Denial of Service (CVSS 7.5)