{"metadata": {"vulnerability": "GHSA-QF9M-VFGH-M389", "count": 58, "kinds": {"milestone": 27, "sighting": 2, "kev": 0, "other": 29}}, "data": [{"timestamp": "2024-02-05T15:15:00Z", "date_only": false, "value": "2024-02-05T15:15:00+00:00", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2024-38", "record": "PYSEC-2024-38", "field": "published"}, {"timestamp": "2024-02-05T15:15:09Z", "date_only": false, "value": "2024-02-05T15:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "GHSA-QF9M-VFGH-M389", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-02-05T17:01:54Z", "date_only": false, "value": "2024-02-05T17:01:54Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-QF9M-VFGH-M389", "field": "published"}, {"timestamp": "2024-02-05T18:16:44Z", "date_only": false, "value": "2024-02-05T18:16:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/179404", "record": "GHSA-QF9M-VFGH-M389", "field": "creation_timestamp", "uuid": "895158db-c5b4-4989-af02-fcdbfa82d491", "content": "https://ift.tt/fvpmIlW\n[GHSA-qf9m-vfgh-m389] FastAPI Content-Type Header ReDoS", "url": "https://t.me/ctinow/179404"}, {"timestamp": "2024-02-16T18:22:32.607Z", "date_only": false, "value": "2024-02-16T18:22:32.607118+00:00", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2024-38", "record": "PYSEC-2024-38", "field": "modified"}, {"timestamp": "2024-02-16T23:37:39Z", "date_only": false, "value": "2024-02-16T23:37:39Z", "kind": "other", "label": "Withdrawn", "source": "github", "record": "GHSA-QF9M-VFGH-M389", "field": "withdrawn"}, {"timestamp": "2024-02-20T18:16:58Z", "date_only": false, "value": "2024-02-20T18:16:58Z", "kind": "other", "label": "Updated", "source": "github", "record": "GHSA-QF9M-VFGH-M389", "field": "modified"}, {"timestamp": "2025-05-09T17:25:46Z", "date_only": false, "value": "2025-05-09T17:25:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15783", "record": "GHSA-QF9M-VFGH-M389", "field": "creation_timestamp", "uuid": "e8a69aec-152f-4d9d-b92f-6f4152d74471", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-24762\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: `python-multipart` is a streaming multipart parser for Python. When using form data, `python-multipart` uses a Regular Expression to parse the HTTP `Content-Type` header, including options. An attacker could send a custom-made `Content-Type` option that is very difficult for the RegEx to process, consuming CPU resources and stalling indefinitely (minutes or more) while holding the main event loop. This means that process can't handle any more requests, leading to regular expression denial of service. This vulnerability has been patched in version 0.0.7.\n\ud83d\udccf Published: 2024-02-05T14:33:06.481Z\n\ud83d\udccf Modified: 2025-05-09T16:32:50.015Z\n\ud83d\udd17 References:\n1. https://github.com/Kludex/python-multipart/security/advisories/GHSA-2jv5-9r88-3w3p\n2. https://github.com/Kludex/python-multipart/commit/20f0ef6b4e4caf7d69a667c54dff57fe467109a4\n3. https://github.com/tiangolo/fastapi/security/advisories/GHSA-qf9m-vfgh-m389\n4. https://github.com/encode/starlette/security/advisories/GHSA-93gm-qmq6-w238\n5. https://github.com/andrew-d/python-multipart/blob/d3d16dae4b061c34fe9d3c9081d9800c49fc1f7a/multipart/multipart.py#L72-L74\n6. https://github.com/encode/starlette/commit/13e5c26a27f4903924624736abd6131b2da80cc5\n7. https://github.com/tiangolo/fastapi/commit/9d34ad0ee8a0dfbbcce06f76c2d5d851085024fc\n8. https://github.com/tiangolo/fastapi/releases/tag/0.109.1", "url": "https://t.me/DarkWebInformer_CVEAlerts/15783"}, {"timestamp": "2026-08-13T16:35:12Z", "date_only": false, "value": "2026-08-13T16:35:12Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-AIDER-CVE-2024-24762", "record": "BREW-AIDER-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T16:35:12Z", "date_only": false, "value": "2026-08-13T16:35:12Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-AIDER-CVE-2024-24762", "record": "BREW-AIDER-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-08-13T16:42:07Z", "date_only": false, "value": "2026-08-13T16:42:07Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-CYCODE-CVE-2024-24762", "record": "BREW-CYCODE-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T16:42:09Z", "date_only": false, "value": "2026-08-13T16:42:09Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-DATASETTE-CVE-2024-24762", "record": "BREW-DATASETTE-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T16:43:57Z", "date_only": false, "value": "2026-08-13T16:43:57Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-DSTACK-CVE-2024-24762", "record": "BREW-DSTACK-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T16:46:30Z", "date_only": false, "value": "2026-08-13T16:46:30Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-FASTAPI-CVE-2024-24762", "record": "BREW-FASTAPI-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T16:46:30Z", "date_only": false, "value": "2026-08-13T16:46:30Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-FASTAPI-CVE-2024-24762", "record": "BREW-FASTAPI-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-08-13T16:46:31Z", "date_only": false, "value": "2026-08-13T16:46:31Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-FASTMCP-CVE-2024-24762", "record": "BREW-FASTMCP-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T16:51:23Z", "date_only": false, "value": "2026-08-13T16:51:23Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-GLANCES-CVE-2024-24762", "record": "BREW-GLANCES-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T16:51:23Z", "date_only": false, "value": "2026-08-13T16:51:23Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-GLANCES-CVE-2024-24762", "record": "BREW-GLANCES-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-08-13T16:54:46Z", "date_only": false, "value": "2026-08-13T16:54:46Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-GPTME-CVE-2024-24762", "record": "BREW-GPTME-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T16:56:26Z", "date_only": false, "value": "2026-08-13T16:56:26Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-HERMES-AGENT-CVE-2024-24762", "record": "BREW-HERMES-AGENT-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:01:40Z", "date_only": false, "value": "2026-08-13T17:01:40Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-KIMI-CLI-CVE-2024-24762", "record": "BREW-KIMI-CLI-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:01:40Z", "date_only": false, "value": "2026-08-13T17:01:40Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-KIMI-CLI-CVE-2024-24762", "record": "BREW-KIMI-CLI-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-08-13T17:13:13Z", "date_only": false, "value": "2026-08-13T17:13:13Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MCP-ATLASSIAN-CVE-2024-24762", "record": "BREW-MCP-ATLASSIAN-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:13:13Z", "date_only": false, "value": "2026-08-13T17:13:13Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MCP-GOOGLE-SHEETS-CVE-2024-24762", "record": "BREW-MCP-GOOGLE-SHEETS-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:13:13Z", "date_only": false, "value": "2026-08-13T17:13:13Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MCP-PROXY-CVE-2024-24762", "record": "BREW-MCP-PROXY-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:13:14Z", "date_only": false, "value": "2026-08-13T17:13:14Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MCPM-CVE-2024-24762", "record": "BREW-MCPM-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:14:16Z", "date_only": false, "value": "2026-08-13T17:14:16Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-MISTRAL-VIBE-CVE-2024-24762", "record": "BREW-MISTRAL-VIBE-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:19:23Z", "date_only": false, "value": "2026-08-13T17:19:23Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-OMNARA-CVE-2024-24762", "record": "BREW-OMNARA-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:19:23Z", "date_only": false, "value": "2026-08-13T17:19:23Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-OMNARA-CVE-2024-24762", "record": "BREW-OMNARA-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-08-13T17:24:19Z", "date_only": false, "value": "2026-08-13T17:24:19Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-OTERM-CVE-2024-24762", "record": "BREW-OTERM-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:28:18Z", "date_only": false, "value": "2026-08-13T17:28:18Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PIECES-CLI-CVE-2024-24762", "record": "BREW-PIECES-CLI-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:28:25Z", "date_only": false, "value": "2026-08-13T17:28:25Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-POCKET-TTS-CVE-2024-24762", "record": "BREW-POCKET-TTS-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:32:07Z", "date_only": false, "value": "2026-08-13T17:32:07Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-RAPID-MLX-CVE-2024-24762", "record": "BREW-RAPID-MLX-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:32:07Z", "date_only": false, "value": "2026-08-13T17:32:07Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-RAPID-MLX-CVE-2024-24762", "record": "BREW-RAPID-MLX-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-08-13T17:34:27Z", "date_only": false, "value": "2026-08-13T17:34:27Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-SEMGREP-CVE-2024-24762", "record": "BREW-SEMGREP-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:35:48Z", "date_only": false, "value": "2026-08-13T17:35:48Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-SNYK-AGENT-SCAN-CVE-2024-24762", "record": "BREW-SNYK-AGENT-SCAN-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:41:09Z", "date_only": false, "value": "2026-08-13T17:41:09Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-STRANDS-AGENTS-SOPS-CVE-2024-24762", "record": "BREW-STRANDS-AGENTS-SOPS-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:42:12Z", "date_only": false, "value": "2026-08-13T17:42:12Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-SYSAIDMIN-CVE-2024-24762", "record": "BREW-SYSAIDMIN-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-13T17:43:26Z", "date_only": false, "value": "2026-08-13T17:43:26Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-THEHARVESTER-CVE-2024-24762", "record": "BREW-THEHARVESTER-CVE-2024-24762", "field": "published"}, {"timestamp": "2026-08-17T17:15:17Z", "date_only": false, "value": "2026-08-17T17:15:17Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-HERMES-AGENT-CVE-2024-24762", "record": "BREW-HERMES-AGENT-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-08-28T13:07:36Z", "date_only": false, "value": "2026-08-28T13:07:36Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-POCKET-TTS-CVE-2024-24762", "record": "BREW-POCKET-TTS-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-09T23:50:44Z", "date_only": false, "value": "2026-09-09T23:50:44Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-CYCODE-CVE-2024-24762", "record": "BREW-CYCODE-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-09T23:56:32Z", "date_only": false, "value": "2026-09-09T23:56:32Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-FASTMCP-CVE-2024-24762", "record": "BREW-FASTMCP-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-10T00:05:56Z", "date_only": false, "value": "2026-09-10T00:05:56Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-GPTME-CVE-2024-24762", "record": "BREW-GPTME-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-10T00:30:25Z", "date_only": false, "value": "2026-09-10T00:30:25Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MCP-ATLASSIAN-CVE-2024-24762", "record": "BREW-MCP-ATLASSIAN-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-10T00:30:25Z", "date_only": false, "value": "2026-09-10T00:30:25Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MCP-GOOGLE-SHEETS-CVE-2024-24762", "record": "BREW-MCP-GOOGLE-SHEETS-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-10T00:30:25Z", "date_only": false, "value": "2026-09-10T00:30:25Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MCP-PROXY-CVE-2024-24762", "record": "BREW-MCP-PROXY-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-10T00:31:16Z", "date_only": false, "value": "2026-09-10T00:31:16Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MISTRAL-VIBE-CVE-2024-24762", "record": "BREW-MISTRAL-VIBE-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-10T00:53:26Z", "date_only": false, "value": "2026-09-10T00:53:26Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PIECES-CLI-CVE-2024-24762", "record": "BREW-PIECES-CLI-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-10T01:12:04Z", "date_only": false, "value": "2026-09-10T01:12:04Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-SEMGREP-CVE-2024-24762", "record": "BREW-SEMGREP-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-10T01:16:38Z", "date_only": false, "value": "2026-09-10T01:16:38Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-SNYK-AGENT-SCAN-CVE-2024-24762", "record": "BREW-SNYK-AGENT-SCAN-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-10T01:24:31Z", "date_only": false, "value": "2026-09-10T01:24:31Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-SYSAIDMIN-CVE-2024-24762", "record": "BREW-SYSAIDMIN-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-10T19:56:14Z", "date_only": false, "value": "2026-09-10T19:56:14Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-MCPM-CVE-2024-24762", "record": "BREW-MCPM-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-10T20:19:31Z", "date_only": false, "value": "2026-09-10T20:19:31Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-OTERM-CVE-2024-24762", "record": "BREW-OTERM-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-10T21:05:20Z", "date_only": false, "value": "2026-09-10T21:05:20Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-STRANDS-AGENTS-SOPS-CVE-2024-24762", "record": "BREW-STRANDS-AGENTS-SOPS-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-09-17T17:44:18Z", "date_only": false, "value": "2026-09-17T17:44:18Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-DATASETTE-CVE-2024-24762", "record": "BREW-DATASETTE-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-10-07T23:06:43Z", "date_only": false, "value": "2026-10-07T23:06:43Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-THEHARVESTER-CVE-2024-24762", "record": "BREW-THEHARVESTER-CVE-2024-24762", "field": "modified"}, {"timestamp": "2026-10-17T08:46:22Z", "date_only": false, "value": "2026-10-17T08:46:22Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-DSTACK-CVE-2024-24762", "record": "BREW-DSTACK-CVE-2024-24762", "field": "modified"}]}