Vulnerability	Vulnerable Version
H Allocation of Resources Without Limits or Throttling python-multipart is an A streaming multipart parser for Python Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the `multipart/form-data`, when line breaks: CR `\r` or LF `\n` in front of the first boundary and any tailing bytes after the last boundary are skipped. An attacker can cause excessive logging and high CPU load, stalling the processing thread by sending a malicious request with lots of data. How to fix Allocation of Resources Without Limits or Throttling? Upgrade `python-multipart` to version 0.0.18 or higher.	[,0.0.18)
M Regular Expression Denial of Service (ReDoS) python-multipart is an A streaming multipart parser for Python Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) via custom `Content-Type` headers. An attacker can consume system resources while processing such a header, thereby blocking other requests from being processed. How to fix Regular Expression Denial of Service (ReDoS)? Upgrade `python-multipart` to version 0.0.7 or higher.	[,0.0.7)

Allocation of Resources Without Limits or Throttling

python-multipart is an A streaming multipart parser for Python

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the multipart/form-data, when line breaks: CR \r or LF \n in front of the first boundary and any tailing bytes after the last boundary are skipped. An attacker can cause excessive logging and high CPU load, stalling the processing thread by sending a malicious request with lots of data.

How to fix Allocation of Resources Without Limits or Throttling?

Upgrade python-multipart to version 0.0.18 or higher.

[,0.0.18)

Regular Expression Denial of Service (ReDoS)

python-multipart is an A streaming multipart parser for Python

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) via custom Content-Type headers. An attacker can consume system resources while processing such a header, thereby blocking other requests from being processed.

How to fix Regular Expression Denial of Service (ReDoS)?

Upgrade python-multipart to version 0.0.7 or higher.

[,0.0.7)

Go back to all versions of this package