This vulnerability involves inefficient algorithmic complexity (CWE-407) in the MultiPartParser of Django web framework versions 6.0 (before 6.0.4), 5.2 (before 5.2.13), and 4.2 (before 4.2.30). Attackers can submit multipart uploads with base64 encoding containing excessive whitespace, causing performance degradation. The issue was reported by Seokchan Yoon. Unsupported earlier Django versions have not been evaluated but may be vulnerable. No CVSS score or official remediation level is currently available.

The impact is a potential denial of service through performance degradation by remote attackers submitting specially crafted multipart uploads. There is no indication of code execution or data breach. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the official Django vendor advisory for current remediation guidance. Users should monitor for updates and apply official patches once available. Until then, consider limiting multipart upload sizes or applying custom input validation to mitigate excessive whitespace in base64 encoded multipart data.