StackRadar

CVE-2024-53981

High

Advisory

Published 2 Dec 2024In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
23
of 17,781 indexed, latest versions
Container images
27
deployed by those charts
Fix available
1 of 1
affected package

Denial of service (DoS) via deformation `multipart/form-data` boundary

Carried by container images the latest versions of 23 of 17,781 indexed charts deploy, on 27 images.

Affected packageAffected versionsFixed inImages
python-multipartpypi0.0.5, 0.0.6, 0.0.90.0.1827
OSV records
GHSA-59g5-xgcq-4qw3
Also known as
PYSEC-2026-1851

Charts affected

23 by stars
ChartLatestAffected imagesRadar Score
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
python-multipart@0.0.9
0.0.18

Open the chart page →

6,543
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
python-multipart@0.0.9
0.0.18

Open the chart page →

6,168
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
python-multipart@0.0.5
0.0.18

Open the chart page →

7,579
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
python-multipart@0.0.6
0.0.18

Open the chart page →

17,877
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
python-multipart@0.0.6
0.0.18

Open the chart page →

1,944
helmuphelmupVerified publisher0.1.01 of 3See more

helmup helmup 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
python-multipart@0.0.9
0.0.18

Open the chart page →

16,514
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
python-multipart@0.0.9
0.0.18

Open the chart page →

20,403
clowder2ncsaVerified publisher1.9.73 of 12See more

clowder2 ncsa 1.9.7

3 of the 12 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
python-multipart@0.0.6
0.0.18
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
python-multipart@0.0.6
0.0.18
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
python-multipart@0.0.6
0.0.18

Open the chart page →

37,373
flrepositorydbassist-iot-fl-repository1.1.01 of 2See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
assistiot/fl_repository:latest0fce3ea719a5
python-multipart@0.0.5
0.0.18

Open the chart page →

4,367
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
python-multipart@0.0.6
0.0.18

Open the chart page →

18,277
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
python-multipart@0.0.5
0.0.18

Open the chart page →

4,550
aerios-k8s-shimeclipse-aeriosVerified publisher1.0.01 of 1See more

aerios-k8s-shim eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
python-multipart@0.0.9
0.0.18

Open the chart page →

1,434
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
python-multipart@0.0.5
0.0.18

Open the chart page →

4,085
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
python-multipart@0.0.9
0.0.18
clsen2024/gwangju_2-3:service-a-151b1d45961cd
python-multipart@0.0.9
0.0.18
clsen2024/gwangju_2-3:service-c-1efb1586c8299
python-multipart@0.0.9
0.0.18

Open the chart page →

6,491
notediscoveryhelmforgeVerified publisher2.0.11 of 1See more

notediscovery helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
python-multipart@0.0.6
0.0.18

Open the chart page →

1,241
pavkrzwiatrzyk0.0.31 of 1See more

pav krzwiatrzyk 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
witcherek7/pav:0.0.342a744f29ac0
python-multipart@0.0.5
0.0.18

Open the chart page →

1,132
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
python-multipart@0.0.5
0.0.18

Open the chart page →

7,315
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
python-multipart@0.0.5
0.0.18

Open the chart page →

43,341
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
python-multipart@0.0.5
0.0.18

Open the chart page →

8,556
my-fastapi-chartmy-fastapi-template0.1.01 of 1See more

my-fastapi-chart my-fastapi-template 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
john19968010/fastapi-template:latest31a90f6bd69c
python-multipart@0.0.5
0.0.18

Open the chart page →

967
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
python-multipart@0.0.6
0.0.18

Open the chart page →

2,298
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
python-multipart@0.0.9
0.0.18

Open the chart page →

5,451
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-53981.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
python-multipart@0.0.9
0.0.18

Open the chart page →

5,565

Container images carrying it

27 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
python-multipart@0.0.6
0.0.18
1
assistiot/fl_repository:latest0fce3ea719a5
python-multipart@0.0.5
0.0.18
1
assistiot/open_api_backend:1.1.230812ba93555
python-multipart@0.0.6
0.0.18
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
python-multipart@0.0.6
0.0.18
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
python-multipart@0.0.6
0.0.18
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
python-multipart@0.0.6
0.0.18
1
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
python-multipart@0.0.9
0.0.18
1
clsen2024/gwangju_2-3:service-a-151b1d45961cd
python-multipart@0.0.9
0.0.18
1
clsen2024/gwangju_2-3:service-c-1efb1586c8299
python-multipart@0.0.9
0.0.18
1
douz/helpdesk:latest4384103d0219
python-multipart@0.0.5
0.0.18
1
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
python-multipart@0.0.9
0.0.18
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
python-multipart@0.0.5
0.0.18
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
python-multipart@0.0.5
0.0.18
1
john19968010/fastapi-template:latest31a90f6bd69c
python-multipart@0.0.5
0.0.18
1
langgenius/dify-api:0.6.11fca918260dd6
python-multipart@0.0.9
0.0.18
1
marcoimme/oidcmock:latestb6035c0721a8
python-multipart@0.0.6
0.0.18
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
python-multipart@0.0.5
0.0.18
1
moreillon/face-recognition-fastapi:x86bacb2ddd8394
python-multipart@0.0.5
0.0.18
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
python-multipart@0.0.9
0.0.18
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
python-multipart@0.0.9
0.0.18
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
python-multipart@0.0.9
0.0.18
1
witcherek7/pav:0.0.342a744f29ac0
python-multipart@0.0.5
0.0.18
1
zurdi15/romm:2.3.12db88fe44c89
python-multipart@0.0.6
0.0.18
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
python-multipart@0.0.9
0.0.18
1
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
python-multipart@0.0.6
0.0.18
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
python-multipart@0.0.9
0.0.18
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
python-multipart@0.0.5
0.0.18
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.