Threats tagged 'brew-mcp-proxy-cve-2026-53540'

The python-multipart library's parse_form() function did not validate the Content-Length header for negative values, causing it to read the entire request body into memory at once instead of in chunks. This vulnerability only affects code that directly calls parse_form() with attacker-controlled negative Content-Length headers without normalization. Common frameworks like Starlette and FastAPI are not affected. The impact is limited to potential memory exhaustion under concurrent requests in bespoke WSGI or http.server handlers. The issue is fixed in version 0.12.0_2, which rejects negative Content-Length values before reading the stream.