CVE-2026-116273

MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The maxparts option defaulted to -1, which disables the limit, so a parser created with default settings builds an entity for every part however many a message has...

CVE-2026-116273

The MIME::Parser component for Perl is vulnerable to memory exhaustion because versions before 5.521 set the max_parts option to -1 by default, removing any limit on the number of message parts. This allows a parser to build an entity for every part in a message regardless of size. Version 5.521 ...

EUVD-2026-112306

MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The maxparts option defaulted to -1, which disables the limit, so a parser created with default settings builds an entity for every part however many a message has...

CVE-2026-116273 MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion

MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The maxparts option defaulted to -1, which disables the limit, so a parser created with default settings builds an entity for every part however many a message has...

DEBIAN-CVE-2026-91990

Tornado before 6.5.8 contains a memory amplification vulnerability in parsemultipartformdata that splits multipart data before validating the maxparts limit. Attackers can send crafted multipart requests with many parts to create large transient lists, exhausting server memory and causing denial ...

CVE-2026-91990

Tornado before 6.5.8 contains a memory amplification vulnerability in parsemultipartformdata that splits multipart data before validating the maxparts limit. Attackers can send crafted multipart requests with many parts to create large transient lists, exhausting server memory and causing denial ...

CVE-2026-91990 Tornado before 6.5.8 Memory Amplification DoS via multipart

Tornado before 6.5.8 contains a memory amplification vulnerability in parsemultipartformdata that splits multipart data before validating the maxparts limit. Attackers can send crafted multipart requests with many parts to create large transient lists, exhausting server memory and causing denial ...

CVE-2026-91990 Tornado before 6.5.8 Memory Amplification DoS via multipart

Tornado before 6.5.8 contains a memory amplification vulnerability in parsemultipartformdata that splits multipart data before validating the maxparts limit. Attackers can send crafted multipart requests with many parts to create large transient lists, exhausting server memory and causing denial ...

CVE-2026-91990 Tornado before 6.5.8 Memory Amplification DoS via multipart

Tornado before 6.5.8 contains a memory amplification vulnerability in parsemultipartformdata that splits multipart data before validating the maxparts limit. Attackers can send crafted multipart requests with many parts to create large transient lists, exhausting server memory and causing denial ...

Fedora 40 : perl-Email-MIME (2024-032e16360b)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-032e16360b advisory. This update, to the latest upstream release, addresses an excessive memory use issue CVE-2024-4140, which can cause denial of service when parsing multi-part...