7.5
Élevée
CVE-2026-42561 Python-Multipart is a streaming multipart parser for Python
Description
Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.27, python-multipart has a denial of service vulnerability in multipart part header parsing. When parsing multipart/form-data, MultipartParser previously had no limit on the number of part headers or the size of an individual part header. An attacker could send a request with either many repeated headers without terminating the header block or a single very large header value, causing excessive CPU work before request rejection or completion. This vulnerability is fixed in 0.0.27.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| python-multipart 0.0 | premières → < 0.0.27 | 0.0.27 |
| Exploit Intelligence | Versions non publiées | |
| Migration Toolkit for Applications 8 | Versions non publiées | |
| OpenShift Lightspeed | Versions non publiées | |
| Red Hat AI Inference Server | Versions non publiées | |
| Red Hat Ansible Automation Platform 2 | Versions non publiées | |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions non publiées | |
| Red Hat OpenShift AI (RHOAI) | Versions non publiées | |
| Red Hat Satellite 6 | Versions non publiées |
Afficher les 6 autres branches Masquer les 6 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat OpenShift AI 3.3 1782887848 | premières → < 1782887848 | 1782887848 |
| Red Hat Ansible Automation Platform 2.6 1783920640 | premières → < 1783920640 | 1783920640 |
| Red Hat Ansible Automation Platform 2.7 1783918403 | premières → < 1783918403 | 1783918403 |
| Red Hat Migration Toolkit for Applications 8.2 1784109883 | premières → < 1784109883 | 1784109883 |
| Red Hat Satellite 6.17 1784834402 | premières → < 1784834402 | 1784834402 |
| Red Hat Satellite 6.19 1785806554 | premières → < 1785806554 | 1785806554 |
Références
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de python-multipart
Les 9 CVE de python-multipart →
CVE-2026-53540
Python-Multipart is a streaming multipart parser for Python
3.7
Faible
CVE-2026-53537
Python-Multipart is a streaming multipart parser for Python
3.7
Faible
CVE-2026-53538
Python-Multipart is a streaming multipart parser for Python
3.7
Faible
CVE-2026-53539
Python-Multipart is a streaming multipart parser for Python
7.5
Élevée