PyPI/fastapi CVE-2024-24762: high 7.5, EPSS 1.52%
FastAPI is a web framework for building APIs with Python 3.8+ based on standard Python type hints. When using form data, `python-multipart` uses a Regular Expression to parse the HTTP `Content-Type` h
Action: Upgrade fastapi to 0.109.1 or later.
pip install fastapi==0.109.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.109.1 | - |
Fixed versions
| 0.109.1 |
Sources
- osv: PYSEC-2024-38
- https://github.com/tiangolo/fastapi/security/advisories/GHSA-qf9m-vfgh-m389
- https://github.com/tiangolo/fastapi/commit/9d34ad0ee8a0dfbbcce06f76c2d5d851085024fc
- https://github.com/tiangolo/fastapi/releases/tag/0.109.1
CVE-2024-24762 · published · modified · JSON