CVE-2026-24486

Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options "UPLOADDIR" and "UPLOADKEEPFILENAME=True". An attacker can write uploaded files to arbitrary locations on the filesystem by...