Skip to content
fr Sign in
7.5 High

CVE-2026-42561 Python-Multipart is a streaming multipart parser for Python

Description

Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.27, python-multipart has a denial of service vulnerability in multipart part header parsing. When parsing multipart/form-data, MultipartParser previously had no limit on the number of part headers or the size of an individual part header. An attacker could send a request with either many repeated headers without terminating the header block or a single very large header value, causing excessive CPU work before request rejection or completion. This vulnerability is fixed in 0.0.27.

Affected products and versions

Product Affected versions Fixed in
python-multipart 0.0 earliest → < 0.0.27 0.0.27
Exploit Intelligence Versions not published
Migration Toolkit for Applications 8 Versions not published
OpenShift Lightspeed Versions not published
Red Hat AI Inference Server Versions not published
Red Hat Ansible Automation Platform 2 Versions not published
Red Hat Enterprise Linux AI (RHEL AI) 3 Versions not published
Red Hat OpenShift AI (RHOAI) Versions not published
Red Hat Satellite 6 Versions not published
Show the 6 other branches
Product Affected versions Fixed in
Red Hat OpenShift AI 3.3 1782887848 earliest → < 1782887848 1782887848
Red Hat Ansible Automation Platform 2.6 1783920640 earliest → < 1783920640 1783920640
Red Hat Ansible Automation Platform 2.7 1783918403 earliest → < 1783918403 1783918403
Red Hat Migration Toolkit for Applications 8.2 1784109883 earliest → < 1784109883 1784109883
Red Hat Satellite 6.17 1784834402 earliest → < 1784834402 1784834402
Red Hat Satellite 6.19 1785806554 earliest → < 1785806554 1785806554

References

Timeline

  1. Published
  2. Last modified

Other CVEs of python-multipart

The 9 CVEs of python-multipart →
CVE-2026-53540 Python-Multipart is a streaming multipart parser for Python 3.7 Low CVE-2026-53537 Python-Multipart is a streaming multipart parser for Python 3.7 Low CVE-2026-53538 Python-Multipart is a streaming multipart parser for Python 3.7 Low CVE-2026-53539 Python-Multipart is a streaming multipart parser for Python 7.5 High
Track this CVE