SUSE-SU-2026:1544-1 Security update for python-python-multipart

This update for python-python-multipart fixes the following issue: - CVE-2026-40347: crafted multipart/form-data can cause a denial of service bsc1262403...

CVE-2026-40347

Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have a denial of service vulnerability when parsing crafted multipart/form-data requests with large preamble or epilogue sections. Upgrade to version 0.0.26 or later, which skips ahead to the next boundary...

Linux Distros Unpatched Vulnerability : CVE-2026-40347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have a denial of service vulnerability when parsing crafted...

CVE-2026-40347 vulnerabilities

Vulnerabilities for packages: airflow-core, semgrep, kserve, tritonserver-backend-vllm-cuda-13.0, airflow, vllm-openai-cuda-12.9, keep, synapse, tritonserver-backend-vllm-cuda-12.9, wazuh-manager, keep-fips, litellm, wazuh-manager-fips...