[{"data":1,"prerenderedAt":512},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-python-multipart-7d2a810e":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":262,"related":312},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:52:27.520Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:50:55.687Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"paket",{"id":77,"slug":78,"identity":79,"ecosystem":80,"name":81,"label":81,"category":82,"aiRelevant":45,"provider":82,"repositoryCount":83,"occurrenceCount":84,"directRepositoryCount":37,"versionCount":85,"licenseExpressions":86,"advisoryIds":88,"advisoryCount":84,"verifiedAttestation":97,"repositories":98,"versions":147},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","pypi","python-multipart",null,7,8,5,[87],"Apache-2.0",[89,90,91,92,93,94,95,96],"GHSA-59g5-xgcq-4qw3","GHSA-5rvq-cxj2-64vf","GHSA-6jv3-5f52-599m","GHSA-mj87-hwqh-73pj","GHSA-pp6c-gr5w-3c5g","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-wp53-j4wj-2cfg",true,[99,108,115,121,128,134,140],{"id":100,"slug":101,"name":102,"pathWithNamespace":103,"versions":104,"evidenceCount":107},"opencode:7202","opencode-7202","MUCGPT","landeshauptstadt-muenchen\u002Fmucgpt",[105,106],"0.0.31","0.0.32",2,{"id":109,"slug":110,"name":111,"pathWithNamespace":112,"versions":113,"evidenceCount":32},"opencode:7781","opencode-7781","kiva-llm-gateway","baden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway",[114],"0.0.18",{"id":116,"slug":117,"name":118,"pathWithNamespace":119,"versions":120,"evidenceCount":32},"opencode:12239","opencode-12239","LLM Service","sh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service",[106],{"id":122,"slug":123,"name":124,"pathWithNamespace":125,"versions":126,"evidenceCount":32},"opencode:7674","opencode-7674","Coding Agent Usage Simulation","uba-ki-lab\u002Fcoding-agent-usage-simulation",[127],"0.0.20",{"id":129,"slug":130,"name":131,"pathWithNamespace":132,"versions":133,"evidenceCount":32},"opencode:10787","opencode-10787","LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework",[127],{"id":135,"slug":136,"name":137,"pathWithNamespace":138,"versions":139,"evidenceCount":32},"opencode:5012","opencode-5012","LLM Testframework","uba-ki-lab\u002Fllm-testframework",[127],{"id":141,"slug":142,"name":143,"pathWithNamespace":144,"versions":145,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[146],"0.0.9",[148,180,205,225,244],{"version":146,"repositoryCount":32,"occurrenceCount":32,"ageDays":149,"advisoryIds":150,"metadata":151},914,[89,90,91,92,93,94,95,96],{"state":152,"checkedAt":153,"publishedAt":154,"deprecated":45,"deprecatedReason":82,"licenses":155,"advisoryIds":156,"links":165,"relatedProjects":174,"attestations":178,"verifiedAttestation":45,"projectStatus":179},"resolved","2026-08-13T02:29:21.454Z","2024-02-10T13:32:02Z",[87],[89,90,91,92,93,94,95,96,157,158,159,160,161,162,163,164],"PYSEC-2026-1851","PYSEC-2026-1852","PYSEC-2026-3036","PYSEC-2026-3037","PYSEC-2026-3038","PYSEC-2026-3039","PYSEC-2026-3040","PYSEC-2026-3041",[166,169,171],{"label":167,"url":168},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Fandrew-d\u002Fpython-multipart",{"label":170,"url":168},"HOMEPAGE",{"label":172,"url":173},"DOCUMENTATION","https:\u002F\u002Fandrew-d.github.io\u002Fpython-multipart\u002F",[175],{"id":176,"relationType":167,"relationProvenance":177},"github.com\u002Fandrew-d\u002Fpython-multipart","UNVERIFIED_METADATA",[],"active",{"version":114,"repositoryCount":32,"occurrenceCount":32,"ageDays":181,"advisoryIds":182,"metadata":183},622,[90,91,92,93,94,95,96],{"state":152,"checkedAt":153,"publishedAt":184,"deprecated":45,"deprecatedReason":82,"licenses":185,"advisoryIds":186,"links":187,"relatedProjects":196,"attestations":201,"verifiedAttestation":97,"projectStatus":179},"2024-11-28T19:16:00Z",[87],[90,91,92,93,94,95,96,158,159,160,161,162,163,164],[188,190,191,193],{"label":167,"url":189},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"label":170,"url":189},{"label":172,"url":192},"https:\u002F\u002Fkludex.github.io\u002Fpython-multipart\u002F",{"label":194,"url":195},"ATTESTATION","https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fpython-multipart\u002F0.0.18\u002Fpython_multipart-0.0.18-py3-none-any.whl\u002Fprovenance",[197,199],{"id":198,"relationType":167,"relationProvenance":177},"github.com\u002Fkludex\u002Fpython-multipart",{"id":198,"relationType":167,"relationProvenance":200},"PYPI_PUBLISH_ATTESTATION",[202],{"type":203,"url":195,"verified":97,"sourceRepository":189,"commit":204},"https:\u002F\u002Fdocs.pypi.org\u002Fattestations\u002Fpublish\u002Fv1","5b1aed83adadbff1677779cd0df53723cd80a0d6",{"version":127,"repositoryCount":206,"occurrenceCount":206,"ageDays":207,"advisoryIds":208,"metadata":209},3,604,[90,91,92,93,94,95,96],{"state":152,"checkedAt":153,"publishedAt":210,"deprecated":45,"deprecatedReason":82,"licenses":211,"advisoryIds":212,"links":213,"relatedProjects":219,"attestations":222,"verifiedAttestation":97,"projectStatus":179},"2024-12-16T19:45:44Z",[87],[90,91,92,93,94,95,96,158,159,160,161,162,163,164],[214,215,216,217],{"label":167,"url":189},{"label":170,"url":189},{"label":172,"url":192},{"label":194,"url":218},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fpython-multipart\u002F0.0.20\u002Fpython_multipart-0.0.20-py3-none-any.whl\u002Fprovenance",[220,221],{"id":198,"relationType":167,"relationProvenance":177},{"id":198,"relationType":167,"relationProvenance":200},[223],{"type":203,"url":218,"verified":97,"sourceRepository":189,"commit":224},"b083cef4d6c68cf036bae1d9c68a986c6e1e3cc4",{"version":105,"repositoryCount":32,"occurrenceCount":32,"ageDays":226,"advisoryIds":227,"metadata":228},69,[],{"state":152,"checkedAt":153,"publishedAt":229,"deprecated":45,"deprecatedReason":82,"licenses":230,"advisoryIds":231,"links":232,"relatedProjects":238,"attestations":241,"verifiedAttestation":97,"projectStatus":179},"2026-06-04T08:27:47Z",[87],[],[233,234,235,236],{"label":170,"url":189},{"label":172,"url":192},{"label":167,"url":189},{"label":194,"url":237},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fpython-multipart\u002F0.0.31\u002Fpython_multipart-0.0.31-py3-none-any.whl\u002Fprovenance",[239,240],{"id":198,"relationType":167,"relationProvenance":177},{"id":198,"relationType":167,"relationProvenance":200},[242],{"type":203,"url":237,"verified":97,"sourceRepository":189,"commit":243},"4cffc68a165f7a6f6b7756ce006fabf07a05b7a4",{"version":106,"repositoryCount":107,"occurrenceCount":107,"ageDays":226,"advisoryIds":245,"metadata":246},[],{"state":152,"checkedAt":153,"publishedAt":247,"deprecated":45,"deprecatedReason":82,"licenses":248,"advisoryIds":249,"links":250,"relatedProjects":256,"attestations":259,"verifiedAttestation":97,"projectStatus":179},"2026-06-04T16:18:57Z",[87],[],[251,252,253,254],{"label":170,"url":189},{"label":172,"url":192},{"label":167,"url":189},{"label":194,"url":255},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fpython-multipart\u002F0.0.32\u002Fpython_multipart-0.0.32-py3-none-any.whl\u002Fprovenance",[257,258],{"id":198,"relationType":167,"relationProvenance":177},{"id":198,"relationType":167,"relationProvenance":200},[260],{"type":203,"url":255,"verified":97,"sourceRepository":189,"commit":261},"238ead62a0bb6f6cdfe122708faa13812f59f9a6",{"occurrences":263,"occurrenceCount":84},[264,271,278,283,289,294,301,306],{"id":265,"repositoryId":122,"repositorySlug":123,"repositoryName":124,"repositoryPathWithNamespace":125,"ecosystem":80,"name":81,"identity":79,"version":127,"versionKey":266,"direct":82,"development":82,"sourceKind":267,"filePath":54,"blobSha":268,"sourceUrl":269,"commitSha":270},"component:0b345423c2c7df95a3cbf0e0","pypi:python-multipart@0.0.20","uv-lock","1b1464cf01496db34285bf91f7841aed50559816","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fblob\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32\u002Fuv.lock","fe8ab81af4926a34c6cf1f3a807ffeda2b398f32",{"id":272,"repositoryId":109,"repositorySlug":110,"repositoryName":111,"repositoryPathWithNamespace":112,"ecosystem":80,"name":81,"identity":79,"version":114,"versionKey":273,"direct":82,"development":45,"sourceKind":274,"filePath":55,"blobSha":275,"sourceUrl":276,"commitSha":277},"component:cff9f3816446787c8ca6c71e","pypi:python-multipart@0.0.18","poetry-lock","48f984e4d97ce607df0ee30b09a8e1e4c935e9db","https:\u002F\u002Fgitlab.opencode.de\u002Fbaden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway\u002F-\u002Fblob\u002F4a5cd798be9b97cc1bff7b30d930eafda774e380\u002Fpoetry.lock","4a5cd798be9b97cc1bff7b30d930eafda774e380",{"id":279,"repositoryId":129,"repositorySlug":130,"repositoryName":131,"repositoryPathWithNamespace":132,"ecosystem":80,"name":81,"identity":79,"version":127,"versionKey":266,"direct":82,"development":82,"sourceKind":267,"filePath":54,"blobSha":280,"sourceUrl":281,"commitSha":282},"component:8f04b7dacdc1d2e0c85e18b4","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd",{"id":284,"repositoryId":116,"repositorySlug":117,"repositoryName":118,"repositoryPathWithNamespace":119,"ecosystem":80,"name":81,"identity":79,"version":106,"versionKey":285,"direct":82,"development":82,"sourceKind":267,"filePath":54,"blobSha":286,"sourceUrl":287,"commitSha":288},"component:61b7843f4bcbcc9cabaab095","pypi:python-multipart@0.0.32","5c34ec93b8f084fb238b9dfb84642a3091538e9d","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service\u002F-\u002Fblob\u002F318cda8c49da743f2c4a18a4f4d5c36fc22102fc\u002Fuv.lock","318cda8c49da743f2c4a18a4f4d5c36fc22102fc",{"id":290,"repositoryId":135,"repositorySlug":136,"repositoryName":137,"repositoryPathWithNamespace":138,"ecosystem":80,"name":81,"identity":79,"version":127,"versionKey":266,"direct":82,"development":82,"sourceKind":267,"filePath":54,"blobSha":291,"sourceUrl":292,"commitSha":293},"component:85440184f1d1ee5fdc961086","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","e8d6e99a1fa63b264e727acb553ed9b1499789b1",{"id":295,"repositoryId":100,"repositorySlug":101,"repositoryName":102,"repositoryPathWithNamespace":103,"ecosystem":80,"name":81,"identity":79,"version":105,"versionKey":296,"direct":82,"development":82,"sourceKind":267,"filePath":297,"blobSha":298,"sourceUrl":299,"commitSha":300},"component:ef42869e0ca4b8af2cb3238e","pypi:python-multipart@0.0.31","mucgpt-assistant-service\u002Fuv.lock","36b26ae58598809148cf87cffcc3b67380e8b928","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F4d053562adec8962a8e523b7ed27b48a9f882d60\u002Fmucgpt-assistant-service\u002Fuv.lock","4d053562adec8962a8e523b7ed27b48a9f882d60",{"id":302,"repositoryId":100,"repositorySlug":101,"repositoryName":102,"repositoryPathWithNamespace":103,"ecosystem":80,"name":81,"identity":79,"version":106,"versionKey":285,"direct":82,"development":82,"sourceKind":267,"filePath":303,"blobSha":304,"sourceUrl":305,"commitSha":300},"component:caa02ad7ee915edf2a70380f","mucgpt-core-service\u002Fuv.lock","8bf6980137a09f5692c9e62798298a2cd9122a99","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F4d053562adec8962a8e523b7ed27b48a9f882d60\u002Fmucgpt-core-service\u002Fuv.lock",{"id":307,"repositoryId":141,"repositorySlug":142,"repositoryName":143,"repositoryPathWithNamespace":144,"ecosystem":80,"name":81,"identity":79,"version":146,"versionKey":308,"direct":82,"development":82,"sourceKind":267,"filePath":54,"blobSha":309,"sourceUrl":310,"commitSha":311},"component:c43a93ce4d05b436ecf01a39","pypi:python-multipart@0.0.9","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"repositories":313,"vulnerabilities":328},[314,316,318,320,322,324,326],{"id":100,"slug":101,"name":102,"pathWithNamespace":103,"versions":315,"evidenceCount":107},[105,106],{"id":109,"slug":110,"name":111,"pathWithNamespace":112,"versions":317,"evidenceCount":32},[114],{"id":116,"slug":117,"name":118,"pathWithNamespace":119,"versions":319,"evidenceCount":32},[106],{"id":122,"slug":123,"name":124,"pathWithNamespace":125,"versions":321,"evidenceCount":32},[127],{"id":129,"slug":130,"name":131,"pathWithNamespace":132,"versions":323,"evidenceCount":32},[127],{"id":135,"slug":136,"name":137,"pathWithNamespace":138,"versions":325,"evidenceCount":32},[127],{"id":141,"slug":142,"name":143,"pathWithNamespace":144,"versions":327,"evidenceCount":32},[146],[329,360,380,401,424,444,465,487],{"id":89,"slug":330,"dossier":45,"summary":331,"aliases":332,"sourceIds":334,"published":335,"modified":336,"checkedAt":7,"severity":337,"references":344,"versionKeys":359,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[333,157],"CVE-2024-53981",[89,157],"2024-12-02T21:37:04Z","2026-07-07T17:56:30.840745333Z",[338,341],{"type":339,"score":340},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":342,"score":343},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[345,348,351,353,355,357],{"type":346,"url":347},"WEB","https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":349,"url":350},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":346,"url":352},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":354,"url":189},"PACKAGE",{"type":354,"url":356},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":349,"url":358},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[308],{"id":90,"slug":361,"dossier":45,"summary":362,"aliases":363,"sourceIds":365,"published":366,"modified":367,"checkedAt":7,"severity":368,"references":370,"versionKeys":379,"packageCount":32,"repositoryCount":85},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[364,159],"CVE-2026-53539",[90,159],"2026-06-15T20:24:09Z","2026-07-13T16:42:40.830680801Z",[369],{"type":339,"score":340},[371,373,374,375,377],{"type":346,"url":372},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":354,"url":189},{"type":354,"url":356},{"type":349,"url":376},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":349,"url":378},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[273,266,308],{"id":91,"slug":381,"dossier":45,"summary":382,"aliases":383,"sourceIds":385,"published":386,"modified":387,"checkedAt":7,"severity":388,"references":391,"versionKeys":400,"packageCount":32,"repositoryCount":85},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[384,160],"CVE-2026-53538",[91,160],"2026-06-15T20:22:25Z","2026-07-13T16:43:47.733262470Z",[389],{"type":339,"score":390},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[392,394,395,396,398],{"type":346,"url":393},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":354,"url":189},{"type":354,"url":356},{"type":349,"url":397},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":349,"url":399},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[273,266,308],{"id":92,"slug":402,"dossier":45,"summary":403,"aliases":404,"sourceIds":406,"published":407,"modified":408,"checkedAt":7,"severity":409,"references":412,"versionKeys":423,"packageCount":32,"repositoryCount":85},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[405,161],"CVE-2026-40347",[92,161],"2026-04-15T19:45:44Z","2026-07-13T16:43:05.220439399Z",[410],{"type":339,"score":411},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[413,415,417,418,420,421],{"type":346,"url":414},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":349,"url":416},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":354,"url":189},{"type":346,"url":419},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":354,"url":356},{"type":349,"url":422},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[273,266,308],{"id":93,"slug":425,"dossier":45,"summary":426,"aliases":427,"sourceIds":429,"published":430,"modified":431,"checkedAt":7,"severity":432,"references":434,"versionKeys":443,"packageCount":32,"repositoryCount":85},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[428,162],"CVE-2026-42561",[93,162],"2026-05-06T21:56:14Z","2026-07-13T16:42:24.725022295Z",[433],{"type":339,"score":340},[435,437,439,440,441],{"type":346,"url":436},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":349,"url":438},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":354,"url":189},{"type":354,"url":356},{"type":349,"url":442},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[273,266,308],{"id":94,"slug":445,"dossier":45,"summary":446,"aliases":447,"sourceIds":449,"published":450,"modified":451,"checkedAt":7,"severity":452,"references":455,"versionKeys":464,"packageCount":32,"repositoryCount":85},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[448,163],"CVE-2026-53540",[94,163],"2026-06-15T20:23:45Z","2026-07-13T16:43:20.711288699Z",[453],{"type":339,"score":454},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[456,458,459,460,462],{"type":346,"url":457},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":354,"url":189},{"type":354,"url":356},{"type":349,"url":461},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":349,"url":463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[273,266,308],{"id":95,"slug":466,"dossier":45,"summary":467,"aliases":468,"sourceIds":470,"published":471,"modified":472,"checkedAt":7,"severity":473,"references":475,"versionKeys":486,"packageCount":32,"repositoryCount":85},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[469,164],"CVE-2026-53537",[95,164],"2026-06-15T20:20:51Z","2026-07-15T22:30:45.845963114Z",[474],{"type":339,"score":390},[476,478,480,481,483,485],{"type":346,"url":477},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":349,"url":479},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":354,"url":189},{"type":349,"url":482},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":346,"url":484},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":354,"url":356},[273,266,308],{"id":96,"slug":488,"dossier":45,"summary":489,"aliases":490,"sourceIds":492,"published":493,"modified":494,"checkedAt":7,"severity":495,"references":498,"versionKeys":511,"packageCount":32,"repositoryCount":85},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[491,158],"CVE-2026-24486",[96,158],"2026-01-26T23:28:05Z","2026-07-07T17:57:28.813401667Z",[496],{"type":339,"score":497},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[499,501,503,505,506,508,509],{"type":346,"url":500},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":349,"url":502},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":346,"url":504},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":354,"url":189},{"type":346,"url":507},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":354,"url":356},{"type":349,"url":510},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[273,266,308],1786593602452]