Skip to content

Product

defnull multipart vulnerabilities

1 published CVE affecting defnull multipart, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest defnull multipart CVEs

Newest publication first

  1. CVE-2026-28356 ReDoS in multipart 1.3.0 - `parse_options_header()`

    Published
    HighCVSS 7.5 EPSS 0.84%

    multipart is a fast multipart/form-data parser for python. Prior to 1.2.2, 1.3.1 and 1.4.0-dev, the parse_options_header() function in multipart.py uses a regular expression with an ambiguous alternation, which can cause exponential backtracking (ReDoS) when parsing maliciously c...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.