CVE-2026-42561 | BDVDB-2026-332997 Detail

Description#

Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.27, python-multipart has a denial of service vulnerability in multipart part header parsing. When parsing multipart/form-data, MultipartParser previously had no limit on the number of part headers or the size of an individual part header. An attacker could send a request with either many repeated headers without terminating the header block or a single very large header value, causing excessive CPU work before request rejection or completion. This vulnerability is fixed in 0.0.27.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-05-13Record published in the CVE List.
2. Version 22026-08-07Most recent update recorded in the CVE List.