Kludex python-multipart

• CVE-2026-53540 Low 3.7 Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory 0.3%
• CVE-2026-53537 Low 3.7 Python-Multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters 0.3%
• CVE-2026-53538 Low 3.7 Python-Multipart: Semicolon treated as querystring field separator enables parameter smuggling 0.3%
• CVE-2026-53539 High 7.5 Python-Multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service 0.5%
• CVE-2026-42561 High 7.5 Python-Multipart: Denial of Service via unbounded multipart part headers 0.7%
• CVE-2026-40347 Medium 5.3 Python-Multipart affected by Denial of Service via large multipart preamble or epilogue data 0.4%
• CVE-2026-24486 High 8.6 Python-Multipart has Arbitrary File Write via Non-Default Configuration 2.2%
• CVE-2024-53981 High 7.5 python-multipart has a Denial of service (DoS) via deformation `multipart/form-data` boundary 0.6%
• CVE-2024-24762 High 7.5 python-multipart vulnerable to content-type header Regular expression Denial of Service 1.5%