Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Python Multipart Update Fixes Denial of Service Risks
published 5 months ago
Summary
A software update for Python's multipart library fixes two security issues that could cause a website or service to become unresponsive, potentially disrupting business operations. Affected systems should be updated to the latest version to prevent these issues. Users should check with their software provider for the latest update instructions.
What to do
- Update suse python-python-multipart to version 0.0.20-160000.4.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Enterprise Server for SAP applications 16.0 | suse | python-python-multipart |
< 0.0.20-160000.4.1 Fix: upgrade to 0.0.20-160000.4.1
|
| SUSE:Linux Enterprise Server 16.0 | suse | python-python-multipart |
< 0.0.20-160000.4.1 Fix: upgrade to 0.0.20-160000.4.1
|
Original advisory text
Security update for python-python-multipart
This update for python-python-multipart fixes the following issues
- CVE-2026-40347: crafted `multipart/form-data` can cause a denial of service (bsc#1262403).
- CVE-2026-42561: denial of service vulnerability in multipart part header parsing (bsc#1265250).
- CVE-2026-40347: crafted `multipart/form-data` can cause a denial of service (bsc#1262403).
- CVE-2026-42561: denial of service vulnerability in multipart part header parsing (bsc#1265250).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202621999-1/ Vendor Advisory
- https://bugzilla.suse.com/1262403 Third Party Advisory
- https://bugzilla.suse.com/1265250 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-40347 URL
- https://www.suse.com/security/cve/CVE-2026-42561 URL
Timeline
Published29 May 2026
Updated9 Jun 2026
First seen9 Jun 2026
Sources
SUSE-SU-2026:21999-1 · OSV
Track software like this
Free during beta