PT-2026-147165

Name of the Vulnerable Software and Affected Versions AIOHTTP versions prior to 3.14.4 Description The Request.post function does not limit the number of fields in a URL-encoded form body. Inserting numerous repeated keys into MultiDict results in quadratic time complexity on the event loop,...

CLEANSTART-2026-KN14918 Multidict is an implementation of a multidict data structure

Security vulnerability affects the airflow-3 package. Multidict is an implementation of a multidict data structure...

PT-2026-146188

Security vulnerability affects the airflow-3 package. Multidict is an implementation of a multidict data structure...

python313-multidict-7.0.0-1.1 on GA media (moderate)

python313-multidict-7.0.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:12117-1 Rating: moderate Cross-References: CVE-2026-104874 CVSS scores: CVE-2026-104874 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-104874 SUSE : 6.9...

Oracle Linux 9 : python-oci-sdk (ELSA-2026-604898)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-604898 advisory. 2.187.0-1.0.5 - Fix multiple CVEs in pyjwt, aiohttp, pyOpenSSL, multidict Tenable has extracted the preceding description block directly from the...

python-oci-sdk security update

2.187.0-1.0.5 - Fix multiple CVEs in pyjwt, aiohttp, pyOpenSSL, multidict...

adversarial-workflow (>=0.4.0, <=0.9.8), agentiva (>=0.1.0, <=0.1.5) +163 more potentially affected by CVE-2026-104874 via multidict (>=6.7.0, <=6.8.0)

multidict PYPI version =6.7.0, =0.4.0, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =1.0.5, =25.11.0, =0.7.0, =0.1.3, =0.1.4 - audience-framework 1.0.0 and more Source cves: CVE-2026-104874 Source advisory: OSV:PYSEC-2026-4244...

PYSEC-2026-4244 Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

Description A reference leak in the items-view union and subtraction operators of aio-libs/multidict 6.7.0 through 6.9.0 C extension lets a remote client drive unbounded, unreclaimable memory growth by having each operand element leak one key-identity object and one value object. The...

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

DescriptionA reference leak in the items-view union and subtraction operators of aio-libs/multidict 6.7.0 through 6.9.0 C extension lets a remote client drive unbounded, unreclaimable memory growth by having each operand element leak one key-identity object and one value object. The reflected-uni...

OPENSUSE-SU-2026:12117-1 python313-multidict-7.0.0-1.1 on GA media

These are all security issues fixed in the python313-multidict-7.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

CLEANSTART-2026-YA90278 Multidict is an implementation of a multidict data structure

CVE-2026-104874 affects multiple packages. Multidict is an implementation of a multidict data structure. See references for individual vulnerability details...

adversarial-workflow (>=0.4.0, <=0.9.8), agentiva (>=0.1.0, <=0.1.5) +163 more potentially affected by CVE-2026-104874 via multidict (>=6.7.0, <=6.8.0)

multidict PYPI version =6.7.0, =0.4.0, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =1.0.5, =25.11.0, =0.7.0, =0.1.3, =0.1.4 - audience-framework 1.0.0 and more Source cves: CVE-2026-104874 Source advisory: OSV:GHSA-54P9-H82J-F925...

adversarial-workflow (>=0.4.0, <=0.9.8), agentiva (>=0.1.0, <=0.1.5) +163 more potentially affected by CVE-2026-104874 via multidict (>=6.7.0, <=6.8.0)

multidict PYPI version =6.7.0, =0.4.0, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =1.0.5, =25.11.0, =0.7.0, =0.1.3, =0.1.4 - audience-framework 1.0.0 and more Source cves: CVE-2026-104874 Source advisory: GHSA-54P9-H82J-F925...

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

Description A reference leak in the items-view union and subtraction operators of aio-libs/multidict 6.7.0 through 6.9.0 C extension lets a remote client drive unbounded, unreclaimable memory growth by having each operand element leak one key-identity object and one value object. The...

GHSA-54P9-H82J-F925 Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

Description A reference leak in the items-view union and subtraction operators of aio-libs/multidict 6.7.0 through 6.9.0 C extension lets a remote client drive unbounded, unreclaimable memory growth by having each operand element leak one key-identity object and one value object. The...

EUVD-2026-91800

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction...

SUSE CVE-2026-104874

Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view reflected union operation, operand | d.items, in multidictitemsviewor2impl and subtraction operation, d.items - operand, in multidictitemsviewsub1impl fail to release new key-identit...

Linux Distros Unpatched Vulnerability : CVE-2026-104874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view reflected union operation, operand | d.items,...

adversarial-workflow (>=0.4.0, <=0.9.8), agentiva (>=0.1.0, <=0.1.5) +163 more potentially affected by CVE-2026-104874 via multidict (>=6.7.0, <=6.8.0)

multidict PYPI version =6.7.0, =0.4.0, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =1.0.5, =25.11.0, =0.7.0, =0.1.3, =0.1.4 - audience-framework 1.0.0 and more Source cves: CVE-2026-104874 Source advisory: SNYK:PYTHON-MULTIDICT-20510280...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via a reference leak in the C extension's items view operations multidictitemsviewor2impl and multidictitemsviewsub1impl, which handle the operand | md.items and md.items - operand set...