PT-2026-60028

Applications using Werkzeug to parse multipart/form-data requests are vulnerable to resource exhaustion. A specially crafted form body can bypass the Request.max form memory size setting. The Request.max content length setting, as well as resource limits provided by deployment software and...