CVE-2026-24486

Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options "UPLOADDIR" and "UPLOADKEEPFILENAME=True". An attacker can write uploaded files to arbitrary locations on the filesystem by...

CVE-2026-24486: Improper Limitation of a Pathname to a Restricted Directory

Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options UPLOADDIR and UPLOADKEEPFILENAME=True. An attacker can write uploaded files to arbitrary locations on the filesystem by crafting...