CVE-2026-42561
HighAdvisory
Published 6 May 2026In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.007
- 53rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 58
- of 17,781 indexed, latest versions
- Container images
- 64
- deployed by those charts
- Fix available
- 1 of 1
- affected package
python-multipart has Denial of Service via unbounded multipart part headers
Carried by container images the latest versions of 58 of 17,781 indexed charts deploy, on 64 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| python-multipartpypi | 0.0.5, 0.0.6, 0.0.9, 0.0.18+6 more | 0.0.27 | 64 |
- OSV records
- GHSA-pp6c-gr5w-3c5g
- Also known as
- PYSEC-2026-3039
Charts affected
58 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| prefect-agentprefectVerified publisher | 2024.8.30163822 | 1 of 1See more | 5,451 |
| prompt-dbprompt-dbVerified publisher | 1.0.7 | 1 of 3See more | 3,332 |
| rhbk-neurofacerhbk-neurofaceVerified publisher | 1.0.0 | 1 of 4See more | 3,781 |
| matrix-stackrock8sVerified publisher | 0.8.1 | 1 of 7See more | 9,256 |
| showroom-docs-mcpshowroom-docs-mcpVerified publisher | 2.1.0 | 1 of 4See more | 5,201 |
| mealiesmarthallVerified publisher | 0.0.10 | 1 of 1See more | 5,565 |
| srebotsrebot | 0.14.0 | 1 of 2See more | 1,542 |
| wazuhwazuh-helm-eksVerified publisher | 1.2.10 | 1 of 6See more | 5,484 |
Container images carrying it
64 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 067e54e2e107 | python-multipart | 0.0.27 | 1 |
| ghcr.io/ | cd25a5cc3f1b | python-multipart | 0.0.27 | 1 |
| ghcr.io/ | 379e31b8c751 | python-multipart | 0.0.27 | 1 |
| ghcr.io/ | 322369a5b748 | python-multipart | 0.0.27 | 1 |
| ghcr.io/ | b56da41cf178 | python-multipart | 0.0.27 | 1 |
| ghcr.io/ | bb2939094eed | python-multipart | 0.0.27 | 1 |
| ghcr.io/ | 74d6d33376eb | python-multipart | 0.0.27 | 1 |
| ghcr.io/ | 3d0f1ddeebf5 | python-multipart | 0.0.27 | 1 |
| ghcr.io/ | 67f99a5beab7 | python-multipart | 0.0.27 | 1 |
| ghcr.io/ | 9b4415e937b2 | python-multipart | 0.0.27 | 1 |
| ghcr.io/ | 45459c0910fc | python-multipart | 0.0.27 | 1 |
| ghcr.io/ | 6e04659a3baa | python-multipart | 0.0.27 | 1 |
| quay.io/ | 3194d46df0f9 | python-multipart | 0.0.27 | 1 |
| quay.io/ | cba71dc08c8a | python-multipart | 0.0.27 | 1 |