Page MenuHomeVyOS Platform
Create Task
Maniphest T8530

Update python-multipart in vyos-http-api-tools for security advisory
Closed, ResolvedPublicBUG
Actions

Description

Update python-multipart to fix inefficient multipart parsing, which can be used to degrade availability:
https://github.com/vyos/vyos-http-api-tools/security/dependabot/16

Details

Version
-
Is it a breaking change?
Perfectly compatible
Issue type
Security vulnerability

Event Timeline

jestabro created this task.Apr 17 2026, 5:45 PM
jestabro changed the edit policy from "Custom Policy" to "Maintainers (Project)".Apr 17 2026, 5:45 PM
jestabro claimed this task.Apr 17 2026, 5:50 PM
jestabro triaged this task as High priority.
jestabro renamed this task from Update python-multipart in vyos-http-api-tools for security adivsory to Update python-multipart in vyos-http-api-tools for security advisory.Apr 17 2026, 6:11 PM
jestabro added a comment.Apr 17 2026, 6:19 PM

PR:
https://github.com/vyos/vyos-http-api-tools/pull/33

pasik subscribed.Apr 19 2026, 1:46 PM
Viacheslav closed this task as Resolved.Apr 24 2026, 12:08 PM
Viacheslav moved this task from Need Triage to Completed on the VyOS Rolling board.