Known Vulnerabilities for Multipart by Defnull
Listed below are 10 of the newest known vulnerabilities associated with "Multipart" by "Defnull".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-40347 json | Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have a denial of service vulnerability ... | Not Provided | 2026-04-18 | 2026-04-17 |
| CVE-2026-40189 json | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.4, goshs enforces the documented per-folder .goshs ACL/basic-a... | Not Provided | 2026-04-10 | 2026-04-13 |
| CVE-2026-39360 json | RustFS is a distributed object storage system built in Rust. Prior to alpha.90, RustFS contains a missing authorization check... | Not Provided | 2026-04-07 | 2026-04-07 |
| CVE-2026-35393 json | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.3, the POST multipart upload directory not sanitized. This vul... | Not Provided | 2026-04-06 | 2026-04-08 |
| CVE-2026-35214 json | Budibase is an open-source low-code platform. Prior to version 3.33.4, the plugin file upload endpoint (POST /api/plugin/uplo... | Not Provided | 2026-04-03 | 2026-04-03 |
| CVE-2026-34876 json | An issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in mbedtls_ccm_finish() in library/... | Not Provided | 2026-04-02 | 2026-04-02 |
| CVE-2026-34829 json | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Multipart::Parser only wraps ... | Not Provided | 2026-04-02 | 2026-04-02 |
| CVE-2026-34827 json | Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Mul... | Not Provided | 2026-04-02 | 2026-04-02 |
| CVE-2026-34826 json | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.get_byte_ranges parses ... | Not Provided | 2026-04-02 | 2026-04-03 |
| CVE-2026-34517 json | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, for some multipart f... | Not Provided | 2026-04-01 | 2026-04-02 |