CVE-2026-40347
MediumAdvisory
Published 15 Apr 2026In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.004
- 28th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 55
- of 17,781 indexed, latest versions
- Container images
- 61
- deployed by those charts
- Fix available
- 1 of 1
- affected package
python-multipart affected by Denial of Service via large multipart preamble or epilogue data
Carried by container images the latest versions of 55 of 17,781 indexed charts deploy, on 61 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| python-multipartpypi | 0.0.5, 0.0.6, 0.0.9, 0.0.18+5 more | 0.0.26 | 61 |
- OSV records
- GHSA-mj87-hwqh-73pj
- Also known as
- PYSEC-2026-3038
Charts affected
55 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| matrix-stackrock8sVerified publisher | 0.8.1 | 1 of 7See more | 9,256 |
| showroom-docs-mcpshowroom-docs-mcpVerified publisher | 2.1.0 | 1 of 4See more | 5,201 |
| mealiesmarthallVerified publisher | 0.0.10 | 1 of 1See more | 5,565 |
| srebotsrebot | 0.14.0 | 1 of 2See more | 1,542 |
| wazuhwazuh-helm-eksVerified publisher | 1.2.10 | 1 of 6See more | 5,484 |
Container images carrying it
61 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 322369a5b748 | python-multipart | 0.0.26 | 1 |
| ghcr.io/ | b56da41cf178 | python-multipart | 0.0.26 | 1 |
| ghcr.io/ | bb2939094eed | python-multipart | 0.0.26 | 1 |
| ghcr.io/ | 74d6d33376eb | python-multipart | 0.0.26 | 1 |
| ghcr.io/ | 3d0f1ddeebf5 | python-multipart | 0.0.26 | 1 |
| ghcr.io/ | 67f99a5beab7 | python-multipart | 0.0.26 | 1 |
| ghcr.io/ | 9b4415e937b2 | python-multipart | 0.0.26 | 1 |
| ghcr.io/ | 45459c0910fc | python-multipart | 0.0.26 | 1 |
| ghcr.io/ | 6e04659a3baa | python-multipart | 0.0.26 | 1 |
| quay.io/ | 3194d46df0f9 | python-multipart | 0.0.26 | 1 |
| quay.io/ | cba71dc08c8a | python-multipart | 0.0.26 | 1 |