Threats tagged 'brew-gptme-cve-2026-53540'

The python-multipart library's parse_form() function did not validate the Content-Length header for negative values, causing a negative Content-Length to trigger reading the entire request body into memory at once instead of in chunks. This affects only code that calls parse_form() directly with attacker-controlled negative Content-Length headers without normalization. Common frameworks like Starlette, FastAPI, and Werkzeug are not affected. The issue can degrade availability under concurrent requests but does not cause complete denial of service. Version 0.31.0_12 and later reject negative Content-Length values to prevent this behavior.