{"action":"Upgrade python-multipart to 0.0.7 or later.","affected":[{"fixed":"0.0.7","introduced":"0"}],"component":"python-multipart","cve_ids":["CVE-2024-24762"],"ecosystem":"PyPI","epss":0.01523,"exploited":false,"fixed_versions":["0.0.7"],"ghsa_id":"GHSA-2jv5-9r88-3w3p","id":"tcs_01M5KGW26AXC1FF2EJ6DWDW8C4","modified_at":"2026-07-07T17:56:49.144644089Z","published_at":"2026-07-07T11:45:32.513395Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1850","https://github.com/Kludex/python-multipart/security/advisories/GHSA-2jv5-9r88-3w3p","https://nvd.nist.gov/vuln/detail/CVE-2024-24762","https://github.com/github/advisory-database/pull/4829","https://github.com/Kludex/python-multipart/commit/20f0ef6b4e4caf7d69a667c54dff57fe467109a4","https://github.com/encode/starlette/commit/13e5c26a27f4903924624736abd6131b2da80cc5","https://github.com/tiangolo/fastapi/commit/9d34ad0ee8a0dfbbcce06f76c2d5d851085024fc","https://github.com/Kludex/python-multipart","https://github.com/andrew-d/python-multipart/blob/d3d16dae4b061c34fe9d3c9081d9800c49fc1f7a/multipart/multipart.py#L72-L74","https://github.com/pypa/advisory-database/tree/main/vulns/fastapi/PYSEC-2024-38.yaml","https://github.com/tiangolo/fastapi/releases/tag/0.109.1","https://pypi.org/project/python-multipart","https://github.com/advisories/GHSA-2jv5-9r88-3w3p"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-1850","url":"https://osv.dev/vulnerability/PYSEC-2026-1850"}],"summary":"python-multipart vulnerable to Content-Type Header ReDoS"}