Поиск уязвимостей
Количество 11
Количество 11
CVE-2026-24486
Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options `UPLOAD_DIR` and `UPLOAD_KEEP_FILENAME=True`. An attacker can write uploaded files to arbitrary locations on the filesystem by crafting a malicious filename. Users should upgrade to version 0.0.22 to receive a patch or, as a workaround, avoid using `UPLOAD_KEEP_FILENAME=True` in project configurations.
CVE-2026-24486
Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options `UPLOAD_DIR` and `UPLOAD_KEEP_FILENAME=True`. An attacker can write uploaded files to arbitrary locations on the filesystem by crafting a malicious filename. Users should upgrade to version 0.0.22 to receive a patch or, as a workaround, avoid using `UPLOAD_KEEP_FILENAME=True` in project configurations.
CVE-2026-24486
Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options `UPLOAD_DIR` and `UPLOAD_KEEP_FILENAME=True`. An attacker can write uploaded files to arbitrary locations on the filesystem by crafting a malicious filename. Users should upgrade to version 0.0.22 to receive a patch or, as a workaround, avoid using `UPLOAD_KEEP_FILENAME=True` in project configurations.
CVE-2026-24486
Python-Multipart is a streaming multipart parser for Python. Prior to ...
openSUSE-SU-2026:20125-1
Security update for python-python-multipart
SUSE-SU-2026:0307-1
Security update for python-python-multipart
GHSA-wp53-j4wj-2cfg
Python-Multipart has Arbitrary File Write via Non-Default Configuration
BDU:2026-01058
Уязвимость конфигурации UPLOAD_DIR и UPLOAD_KEEP_FILENAME=True потокового многокомпонентного парсера python-multipart, позволяющая нарушителю записывать произвольные файлы
ROS-20261026-80-0212
Уязвимость python-python-multipart
ROS-20261026-73-0213
Уязвимость python-multipart
ALT-PU-2026-6503
ALT-PU-2026-6503: package `python3-module-python-multipart` update to version 0.0.26-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-24486 Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options `UPLOAD_DIR` and `UPLOAD_KEEP_FILENAME=True`. An attacker can write uploaded files to arbitrary locations on the filesystem by crafting a malicious filename. Users should upgrade to version 0.0.22 to receive a patch or, as a workaround, avoid using `UPLOAD_KEEP_FILENAME=True` in project configurations. | CVSS3: 7.5 | 2% Низкий | 10 месяцев назад |
 | CVE-2026-24486 Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options `UPLOAD_DIR` and `UPLOAD_KEEP_FILENAME=True`. An attacker can write uploaded files to arbitrary locations on the filesystem by crafting a malicious filename. Users should upgrade to version 0.0.22 to receive a patch or, as a workaround, avoid using `UPLOAD_KEEP_FILENAME=True` in project configurations. | CVSS3: 8.6 | 2% Низкий | 10 месяцев назад |
 | CVE-2026-24486 Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options `UPLOAD_DIR` and `UPLOAD_KEEP_FILENAME=True`. An attacker can write uploaded files to arbitrary locations on the filesystem by crafting a malicious filename. Users should upgrade to version 0.0.22 to receive a patch or, as a workaround, avoid using `UPLOAD_KEEP_FILENAME=True` in project configurations. | CVSS3: 7.5 | 2% Низкий | 10 месяцев назад |
| CVE-2026-24486 Python-Multipart is a streaming multipart parser for Python. Prior to ... | CVSS3: 7.5 | 2% Низкий | 10 месяцев назад |
 | openSUSE-SU-2026:20125-1 Security update for python-python-multipart | 2% Низкий | 9 месяцев назад | |
| SUSE-SU-2026:0307-1 Security update for python-python-multipart | 2% Низкий | 10 месяцев назад | |
| GHSA-wp53-j4wj-2cfg Python-Multipart has Arbitrary File Write via Non-Default Configuration | CVSS3: 8.6 | 2% Низкий | 10 месяцев назад |
 | BDU:2026-01058 Уязвимость конфигурации UPLOAD_DIR и UPLOAD_KEEP_FILENAME=True потокового многокомпонентного парсера python-multipart, позволяющая нарушителю записывать произвольные файлы | CVSS3: 8.6 | 2% Низкий | 10 месяцев назад |
 | ROS-20261026-80-0212 Уязвимость python-python-multipart | CVSS3: 8.6 | 2% Низкий | 14 дней назад |
| ROS-20261026-73-0213 Уязвимость python-multipart | CVSS3: 8.6 | 2% Низкий | 14 дней назад |
| ALT-PU-2026-6503 ALT-PU-2026-6503: package `python3-module-python-multipart` update to version 0.0.26-alt1 | CVSS3: 8.6 | 2% Низкий | 7 месяцев назад |
Уязвимостей на страницу