ROOT-APP-PYPI-CVE-2026-53539 CVE-2026-53539 in python-multipart - Patched by Root

Root has patched CVE-2026-53539 in the python-multipart package for Root:PyPI. Multiple fixed versions available...

CVE-2026-53539 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-53539

Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, when parsing application/x-www-form-urlencoded bodies, QuerystringParser located the field separator with a two step lookup: it first scanned the entire remaining buffer for &, and only when no & existed anywhere ahead...

CVE-2026-53539

CVE-2026-53539 (Python-Multipart) affects the Python-Multipart streaming multipart parser. Prior to 0.0.30, parsing application/x-www-form-urlencoded bodies used a two-step field separator lookup, causing an O(B^2) worst-case workload per chunk when semicolon is used as the separator and no amper...