Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have a denial of service vulnerability when parsing crafted `multipart/form-data` requests with large preamble or epilogue sections. Upgrade to version 0.0.26 or later, which skips ahead to the next boundary candidate when processing leading CR/LF data and immediately discards epilogue data after the closing boundary.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-16 | 1 | Disclosure1 |
| 2026-04-18 | 2 | Disclosure2 |
CVE-2026-40347 Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have a denial of service vulnerability when parsing crafted `multipart/form-data… https://www.cve.org/CVERecord?id=CVE-2026-40347
Post summary
The text announces a denial‑of‑service flaw (CVE‑2026‑40347) affecting Python‑Multipart versions below 0.0.26, but provides no PoC, exploit, or patch details.
CVE-2026-40347 Denial of Service Vulnerability in Python-Multipart Versions Prior to 0.0.26 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40347
Post summary
The message announces a denial‑of‑service flaw in Python‑Multipart versions before 0.0.26, linking to a database entry but providing no PoC, exploit code, or patch details.
🟠 #python-multipart, Denial of Service (DoS), #CVE-2026-40347 (Moderate) https://dailycve.com/python-multipart-denial-of-service-dos-cve-2026-40347-moderate/
Post summary
A moderate‑severity DoS vulnerability (CVE-2026-40347) in python‑multipart is announced, but the brief notice offers no details on exploitation, patching, or PoC evidence.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fastapiexpert | python-multipart | - | python | - |