https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 03:18:49 +0000 https://cve.radiocsirt.org/vuln/cve-2024-24762 <p><strong>Affected:</strong> Kludex python-multipart, tiangolo fastapi, encode starlette</p> <p>`python-multipart` is a streaming multipart parser for Python. When using form data, `python-multipart` uses a Regular Expression to parse the HTTP `Content-Type` header, including options. An attacker could send a custom-made `Content-Type` option that is very difficult for the RegEx to process, consuming CPU resources and stalling indefinitely (minutes or more) while holding the main event loop. This means that process can&#39;t handle any more requests, leading to regular expression denial of service. This vulnerability has been patched in version 0.0.7.</p> <p><strong>Affected:</strong> Kludex python-multipart, tiangolo fastapi, encode starlette</p> <p>`python-multipart` is a streaming multipart parser for Python. When using form data, `python-multipart` uses a Regular Expression to parse the HTTP `Content-Type` header, including options. An attacker could send a custom-made `Content-Type` option that is very difficult for the RegEx to process, consuming CPU resources and stalling indefinitely (minutes or more) while holding the main event loop. This means that process can&#39;t handle any more requests, leading to regular expression denial of service. This vulnerability has been patched in version 0.0.7.</p> https://cve.radiocsirt.org/vuln/cve-2024-24762