FastAPIExpert Python-Multipart

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs

Python-Multipart has Arbitrary File Write via Non-Default Configuration

Published 2026-01-27 · Modified

8.61 PoCEPSS 0.022

python-multipart vulnerable to content-type header Regular expression Denial of Service

Published 2024-02-05 · Analyzed

7.5EPSS 0.015

Python-Multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

Published 2026-06-22 · Analyzed

7.5EPSS 0.005

Python-Multipart affected by Denial of Service via large multipart preamble or epilogue data

Published 2026-04-17 · Analyzed

5.3EPSS 0.004

Python-Multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters

Published 2026-06-22 · Analyzed

5.3EPSS 0.003

Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory

Published 2026-06-22 · Analyzed

3.7EPSS 0.003

Python-Multipart: Semicolon treated as querystring field separator enables parameter smuggling

Published 2026-06-22 · Analyzed

3.7EPSS 0.003