CVE-2026-53540: Negative Content-Length in parse_form buffers the entire body in memory

Critical [CVE-2022-42969 +99] September 2026 IBM Cognos Analytics Vulnerabilities in NetApp Products

NTAP-20260917-0001Source published Sep 17, 2026Source updated Sep 29, 2026

This bulletin covers 100 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.

There are vulnerabilities in multiple Open-Source Software (OSS) components consumed by IBM Cognos Analytics versions 12.1.0 through 12.1.3 FP1 and 12.0.4 through 12.0.4 FP2 which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). NetApp states there is no workaround available at this time.

Affected products in this advisory

No product details extracted. Check the source bulletin.

Source-reported affected versions

• 12.1.0
• 12.1.3
• 12.0.4

Source-reported fixed versions

No fixed-version detail extracted. This does not mean no fix exists.

Mitigation guidance

No mitigation guidance extracted; consult the source.

Low [CVE-2026-53540] Negative Content-Length in parse_form buffers the entire body in memory

CVE-2026-53540Source published Jun 22, 2026Source updated Jun 22, 2026

Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parse_form() did not validate the Content-Length header before using it to bound its chunked read of the request body. A negative Content-Length turned the bounded read into a read-until-EOF, so the entire body was loaded into memory in a single read instead of in fixed-size chunks. The realistic exposure is limited to bespoke WSGI or http.server handlers that forward raw client headers directly into parse_form(). Common frameworks such as Starlette and FastAPI do not call parse_form() directly and are not affected by this specific code path. Red Hat severity: Low — CVSS 3.7 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L). Weakness: CWE-400. Affected Red Hat products: Exploit Intelligence; Migration Toolkit for…

Affected products in this advisory

• Exploit Intelligence
• Migration Toolkit for Applications 8
• OpenShift Lightspeed
• Red Hat AI Inference Server

5 more entries in the full advisory.

Source-reported affected versions

• < 0.0.31

Source-reported fixed versions

• 0.0.31

Mitigation guidance

• Upgrade python-multipart to version 0.0.31 or later, which rejects a negative Content-Length with a ValueError before reading the stream. As a workaround, configure the HTTP stack or reverse proxy to reject or normalize negative Content-Length headers before they reach the application layer.