PyPI / python-multipart

python-multipart vulnerable to Content-Type Header ReDoS

Modified: 4/3/2026

Denial of service (DoS) via deformation `multipart/form-data` boundary

Modified: 2/4/2026

python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

Modified: 6/15/2026

python-multipart: Semicolon treated as querystring field separator enables parameter smuggling

Modified: 6/15/2026

python-multipart affected by Denial of Service via large multipart preamble or epilogue data

Modified: 5/5/2026

python-multipart has Denial of Service via unbounded multipart part headers

Modified: 5/14/2026

python-multipart: Negative Content-Length in parse_form buffers the entire body in memory

Modified: 6/15/2026

python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters

Modified: 6/15/2026

Python-Multipart has Arbitrary File Write via Non-Default Configuration

Modified: 2/4/2026