{"action":"Upgrade fastapi to 0.109.1 or later.","affected":[{"fixed":"0.109.1","introduced":"0"}],"component":"fastapi","cve_ids":["CVE-2024-24762"],"ecosystem":"PyPI","epss":0.01523,"exploited":false,"fixed_versions":["0.109.1"],"ghsa_id":"GHSA-2jv5-9r88-3w3p","id":"tcs_01M5KGN747CHCMH5X8FJMJZ3S2","modified_at":"2026-07-07T17:56:49.144644089Z","published_at":"2024-02-05T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2024-38","https://github.com/tiangolo/fastapi/security/advisories/GHSA-qf9m-vfgh-m389","https://github.com/tiangolo/fastapi/commit/9d34ad0ee8a0dfbbcce06f76c2d5d851085024fc","https://github.com/tiangolo/fastapi/releases/tag/0.109.1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2024-38","url":"https://osv.dev/vulnerability/PYSEC-2024-38"}],"summary":"FastAPI is a web framework for building APIs with Python 3.8+ based on standard Python type hints. When using form data, `python-multipart` uses a Regular Expression to parse the HTTP `Content-Type` h"}