Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.27, python-multipart has a denial of service vulnerability in multipart part header parsing. When parsing multipart/form-data, MultipartParser previously had no limit on the number of part headers or the size of an individual part header. An attacker could send a request with either many repeated headers without terminating the header block or a single very large header value, causing excessive CPU work before request rejection or completion. This vulnerability is fixed in 0.0.27.
References
Configurations
No configuration.
History
24 Jul 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
22 Jul 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Jul 2026, 12:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
10 Jul 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jun 2026, 03:19
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| CWE | CWE-606 |
13 May 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-13 21:16
Updated : 2026-07-24 13:18
NVD link : CVE-2026-42561
Mitre link : CVE-2026-42561
CVE.ORG link : CVE-2026-42561
JSON object : View
Products Affected
No product.