Количество 6
Количество 6
CVE-2026-53540
Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parse_form() did not validate the Content-Length header before using it to bound its chunked read of the request body. A negative Content-Length turned the bounded read into a read-until-EOF, so the entire body was loaded into memory in a single read instead of in fixed-size chunks. This vulnerability is fixed in 0.0.31.
CVE-2026-53540
Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parse_form() did not validate the Content-Length header before using it to bound its chunked read of the request body. A negative Content-Length turned the bounded read into a read-until-EOF, so the entire body was loaded into memory in a single read instead of in fixed-size chunks. This vulnerability is fixed in 0.0.31.
CVE-2026-53540
Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parse_form() did not validate the Content-Length header before using it to bound its chunked read of the request body. A negative Content-Length turned the bounded read into a read-until-EOF, so the entire body was loaded into memory in a single read instead of in fixed-size chunks. This vulnerability is fixed in 0.0.31.
CVE-2026-53540
Python-Multipart is a streaming multipart parser for Python. Prior to ...
GHSA-v9pg-7xvm-68hf
python-multipart: Negative Content-Length in parse_form buffers the entire body in memory
openSUSE-SU-2026:21066-1
Security update for python-python-multipart
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-53540 Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parse_form() did not validate the Content-Length header before using it to bound its chunked read of the request body. A negative Content-Length turned the bounded read into a read-until-EOF, so the entire body was loaded into memory in a single read instead of in fixed-size chunks. This vulnerability is fixed in 0.0.31. | CVSS3: 3.7 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-53540 Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parse_form() did not validate the Content-Length header before using it to bound its chunked read of the request body. A negative Content-Length turned the bounded read into a read-until-EOF, so the entire body was loaded into memory in a single read instead of in fixed-size chunks. This vulnerability is fixed in 0.0.31. | CVSS3: 3.7 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-53540 Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parse_form() did not validate the Content-Length header before using it to bound its chunked read of the request body. A negative Content-Length turned the bounded read into a read-until-EOF, so the entire body was loaded into memory in a single read instead of in fixed-size chunks. This vulnerability is fixed in 0.0.31. | CVSS3: 3.7 | 0% Низкий | около 1 месяца назад |
| CVE-2026-53540 Python-Multipart is a streaming multipart parser for Python. Prior to ... | CVSS3: 3.7 | 0% Низкий | около 1 месяца назад |
| GHSA-v9pg-7xvm-68hf python-multipart: Negative Content-Length in parse_form buffers the entire body in memory | CVSS3: 3.7 | 0% Низкий | около 2 месяцев назад |
 | openSUSE-SU-2026:21066-1 Security update for python-python-multipart | около 1 месяца назад |
Уязвимостей на страницу