Denial of service (DoS) via deformation `multipart/form-data` boundary

🗓️ 07 Jul 2026 14:34:46Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 9 Views

DoS via python-multipart by delaying boundary parsing of form data.

Reporter	Title	Published	Views	Family All 54
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service [CVE-2024-53981]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Ai-Broker Component uses CVE-2024-53981 python_multipart-0.0.17-py3-none-any.whl (Publicly disclosed vulnerability found by Mend) CVE-2024-53981	20 Feb 202505:58	–	ibm
BDU FSTEC	The vulnerability of the python-multipart streaming multi-component parser, related to uncontrolled resource consumption, allows a hacker to cause a service failure.	27 Mar 202500:00	–	bdu_fstec
Chainguard	CVE-2024-53981 vulnerabilities	2 Dec 202416:15	–	cgr
Circl	CVE-2024-53981	2 Dec 202417:55	–	circl
CNNVD	python-multipart 安全漏洞	2 Dec 202400:00	–	cnnvd
CVE	CVE-2024-53981	2 Dec 202415:57	–	cve
Cvelist	CVE-2024-53981 python-multipart has a Denial of service (DoS) via deformation `multipart/form-data` boundary	2 Dec 202415:57	–	cvelist
Debian CVE	CVE-2024-53981	2 Dec 202415:57	–	debiancve

Vulners

Node

Source	Link
github	www.github.com/Kludex/python-multipart/security/advisories/GHSA-59g5-xgcq-4qw3
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-53981
github	www.github.com/Kludex/python-multipart/commit/c4fe4d3cebc08c660e57dd709af1ffa7059b3177
github	www.github.com/Kludex/python-multipart
pypi	www.pypi.org/project/python-multipart
github	www.github.com/advisories/GHSA-59g5-xgcq-4qw3

07 Jul 2026 17:25Current

6Medium risk

Vulners AI Score6

CVSS 3.17.5

CVSS 48.7

EPSS0.00644

SSVC