multipart vulnerabilities

1 known vulnerability in multipart from Defnull. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  multipart: Inefficient Regular Expression Complexity

  CVE-2026-28356Mar 12, 2026Defnull

  multipart is a fast multipart/form-data parser for python. Prior to 1.2.2, 1.3.1 and 1.4.0-dev, the parse_options_header() function in multipart.py uses a regular expression with an ambiguous alternation, which can cause exponential backtracking (ReDoS) when p