Threats tagged 'brew-mcp-proxy-cve-2026-42561'

python-multipart versions from 0.8.2 up to but not including 0.11.0_4 contain a denial of service vulnerability in multipart part header parsing. The MultipartParser did not limit the number or size of headers, allowing attackers to cause excessive CPU usage by sending requests with many repeated headers or very large header values. This can lead to CPU exhaustion and delays in ASGI applications using frameworks like Starlette or FastAPI. The issue is fixed in version 0.11.0_4.