Threats tagged 'brew-gptme-cve-2026-53539'

A vulnerability in python-multipart's QuerystringParser causes quadratic-time parsing of application/x-www-form-urlencoded bodies when semicolon separators are used without ampersands. This leads to excessive CPU consumption and potential denial of service by blocking worker processes during parsing. The issue affects versions from 0.28.0 up to but not including 0.31.0_12. Upgrading to version 0.31.0_12 or later resolves the issue by adhering to the standard of using only '&' as a field separator, ensuring linear parsing time.