### Check for existing issues

- [x] I have searched the existing issues and checked that my issue is not a duplicate.

### What happened?

## Summary

The proxy dependency `python-multipart` is pinned to `0.0.20` in `pyproject.toml`. This version is affected by CVE-2026-40347 (CVSS 5.3, DoS via crafted multipart preamble/epilogue). The fix is available in `0.0.26+`.

## Affected line

https://github.com/BerriAI/litellm/blob/litellm_internal_staging/pyproject.toml

```toml "python-multipart==0.0.20", ```

## Suggested fix

```toml "python-multipart>=0.0.27", ```

## References

- https://github.com/advisories/GHSA-mj87-hwqh-73pj - https://github.com/Kludex/python-multipart/releases/tag/0.0.26

### Steps to Reproduce

1. Pull any official LiteLLM proxy image (e.g. `ghcr.io/berriai/litellm:v1.83.10-stable.patch-nonroot`) 2. Run a container image scan. (fortify, trivy, prisma cloud, etc.)

### Relevant log output

```shell

```

### What part of LiteLLM is this about?

Proxy

### What LiteLLM version are you on ?

v1.83.10

### Twitter / LinkedIn details

_No response_