pypi / python-multipart

python-multipart

What changed in python-multipart 0.0, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-19.

2 breaking9 security1 performance

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

python-multipart 0.012 changes

Ignores RFC 2231 extended parameters when parsing options headers.
0.0.30release notes
Only & is treated as the urlencoded field separator.
0.0.30release notes

Header field name size is bounded before validation.
0.0.31release notes
parse_form validates that Content-Length is non-negative.
0.0.31release notes
python-multipart: Negative Content-Length in parse_form buffers the entire body in memory
0.0.31security advisory
python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters
0.0.30security advisory
python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service
0.0.30security advisory
python-multipart: Semicolon treated as querystring field separator enables parameter smuggling
0.0.30security advisory
python-multipart has Denial of Service via unbounded multipart part headers
0.0.27security advisory
python-multipart affected by Denial of Service via large multipart preamble or epilogue data
0.0.26security advisory
Python-Multipart has Arbitrary File Write via Non-Default Configuration
0.0.22security advisory