CVE-2024-47874

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

This release fixes a Denial of service (DoS) via `multipart/form-data` requests.

You can view the full security advisory:
[GHSA-f96h-pmfr-66vw](https://github.com/encode/starlette/security/advisories/GHSA-f96h-pmfr-66vw)

Fixed

- Add `max_part_size` to `MultiPartParser` to limit the size of parts in `multipart/form-data`
requests [fd038f3](https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733).

Resources

• https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733
• https://github.com/encode/starlette/security/advisories/GHSA-f96h-pmfr-66vw
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47874