Known Vulnerabilities for Multipart by Konghq
Listed below are 1 of the newest known vulnerabilities associated with "Multipart" by "Konghq".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102296 json | ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() that allow malici... | Not Provided | 2026-09-28 | 2026-09-29 |
| CVE-2026-101127 json | Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4 - The public form uplo... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-101040 json | A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an... | Not Provided | 2026-09-28 | 2026-10-01 |
| CVE-2026-97660 json | The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-* Array K... | Not Provided | 2026-10-03 | 2026-10-03 |
| CVE-2026-97359 json | HFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart upload handler that allows unauth... | Not Provided | 2026-09-24 | 2026-09-29 |
| CVE-2026-96758 json | orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape mult... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-95866 json | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vuln... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-93088 json | SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-di... | Not Provided | 2026-09-22 | 2026-09-22 |
| CVE-2026-92748 json | BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticate... | Not Provided | 2026-09-16 | 2026-09-18 |
| CVE-2026-91990 json | Tornado before 6.5.8 contains a memory amplification vulnerability in parse_multipart_form_data that splits multipart data be... | Not Provided | 2026-09-15 | 2026-09-15 |