Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in python-multipart (CVE-2026-24486, CVE-2026-40347, CVE-2026-42561)

Summary Multiple vulnerabilities including path traversal and Denial of Service in the python-multipart streaming parser library CVE-2026-24486, CVE-2026-40347, CVE-2026-42561 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 0.0.32. Vulnerabili...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in python-multipart (CVE-2026-24486, CVE-2026-40347, CVE-2026-42561, CVE-2026-53540)

Summary Multiple vulnerabilities in the python-multipart streaming parser library CVE-2026-24486, CVE-2026-40347, CVE-2026-42561, CVE-2026-53540 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 0.0.32. Vulnerability Details CVEID:CVE-2026-40347...

ROOT-APP-PYPI-CVE-2026-53539 CVE-2026-53539 in python-multipart - Patched by Root

Root has patched CVE-2026-53539 in the python-multipart package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-24486 CVE-2026-24486 in python-multipart - Patched by Root

Root has patched CVE-2026-24486 in the python-multipart package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-53981 CVE-2024-53981 in python-multipart - Patched by Root

Root has patched CVE-2024-53981 in the python-multipart package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-24762 CVE-2024-24762 in python-multipart - Patched by Root

Root has patched CVE-2024-24762 in the python-multipart package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-42561 CVE-2026-42561 in python-multipart - Patched by Root

Root has patched CVE-2026-42561 in the python-multipart package for Root:PyPI. Multiple fixed versions available...

Security Bulletin: Multiple Vulnerabilities in watsonx.data

Summary Multiple vulnerabilities were addressed in watsonx.data 2.4.0 patch 5 version, which was present in different version from watson.data 2.4.0 Vulnerability Details CVEID:CVE-2026-53537 DESCRIPTION: Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30,...

Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub

Summary The following dependency packages are being used by IBM Db2 Genius Hub had vulnerabilties which were resolved. - fastapi, follow-redirects, dompurify, bn.js, elliptic, form-data, js-yaml, poetry, golang.org/x/text, transformers, qs, langchain, brace-expansion, echarts, golang.org/x/sys,...

ROOT-APP-PYPI-CVE-2026-53537 CVE-2026-53537 in python-multipart - Patched by Root

Root has patched CVE-2026-53537 in the python-multipart package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-53538 CVE-2026-53538 in python-multipart - Patched by Root

Root has patched CVE-2026-53538 in the python-multipart package for Root:PyPI. Multiple fixed versions available...

CLSA-2026-1786503821 TuxCare security update for python-multipart (1 CVE)

TuxCare rebuilt python-multipart to address 1 CVE. Fixed in 0.0.6.post7+tuxcare...

CLSA-2026-1783904617 TuxCare security update for python-multipart (1 CVE)

TuxCare rebuilt python-multipart to address 1 CVE. Fixed in 0.0.6.post6+tuxcare...

CLSA-2026-1782781170 TuxCare security update for python-multipart (1 CVE)

TuxCare rebuilt python-multipart to address 1 CVE. Fixed in 0.0.6.post4+tuxcare...

CLSA-2026-1782954025 TuxCare security update for python-multipart (2 CVEs)

TuxCare rebuilt python-multipart to address 2 CVEs. Fixed in 0.0.6.post5+tuxcare...

CLSA-2026-1781571262 TuxCare security update for python-multipart (1 CVE)

TuxCare rebuilt python-multipart to address 1 CVE. Fixed in 0.0.6.post3+tuxcare...

CLSA-2025-1758586346 TuxCare security update for python-multipart (1 CVE)

TuxCare rebuilt python-multipart to address 1 CVE. Fixed in 0.0.6.post1+tuxcare...

CLSA-2026-1769645547 TuxCare security update for python-multipart (1 CVE)

TuxCare rebuilt python-multipart to address 1 CVE. Fixed in 0.0.6.post2+tuxcare...

CVE-2026-53539

A flaw was found in Python-Multipart, a streaming multipart parser. A remote attacker can exploit this vulnerability by submitting a specially crafted application/x-www-form-urlencoded body. This can cause the QuerystringParser to perform inefficient processing, leading to excessive CPU...

PYSEC-2026-3036 python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

Summary When parsing application/x-www-form-urlencoded bodies, QuerystringParser located the field separator with a two step lookup: it first scanned the entire remaining buffer for &, and only when no & existed anywhere ahead did it fall back to scanning for ;. For a body that uses ; as the...