PYSEC-2026-4244 Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

Description A reference leak in the items-view union and subtraction operators of aio-libs/multidict 6.7.0 through 6.9.0 C extension lets a remote client drive unbounded, unreclaimable memory growth by having each operand element leak one key-identity object and one value object. The...

OPENSUSE-SU-2026:12117-1 python313-multidict-7.0.0-1.1 on GA media

These are all security issues fixed in the python313-multidict-7.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

CLEANSTART-2026-YA90278 Multidict is an implementation of a multidict data structure

CVE-2026-104874 affects multiple packages. Multidict is an implementation of a multidict data structure. See references for individual vulnerability details...

EUVD-2026-91800

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction...

GHSA-54P9-H82J-F925 Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

Description A reference leak in the items-view union and subtraction operators of aio-libs/multidict 6.7.0 through 6.9.0 C extension lets a remote client drive unbounded, unreclaimable memory growth by having each operand element leak one key-identity object and one value object. The...

adversarial-workflow (>=0.4.0, <=0.9.8), agentiva (>=0.1.0, <=0.1.5) +169 more potentially affected by CVE-2026-104874 via multidict (>=6.7.0, <=6.8.0)

multidict PYPI version =6.7.0, =0.4.0, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =1.0.5, =25.11.0, =0.7.0, =0.1.3, =0.1.4 - audience-framework 1.0.0 and more Source cves: CVE-2026-104874 Source advisory: GHSA-54P9-H82J-F925...

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

Description A reference leak in the items-view union and subtraction operators of aio-libs/multidict 6.7.0 through 6.9.0 C extension lets a remote client drive unbounded, unreclaimable memory growth by having each operand element leak one key-identity object and one value object. The...

adversarial-workflow (>=0.4.0, <=0.9.8), agentiva (>=0.1.0, <=0.1.5) +169 more potentially affected by CVE-2026-104874 via multidict (>=6.7.0, <=6.8.0)

multidict PYPI version =6.7.0, =0.4.0, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =1.0.5, =25.11.0, =0.7.0, =0.1.3, =0.1.4 - audience-framework 1.0.0 and more Source cves: CVE-2026-104874 Source advisory: OSV:GHSA-54P9-H82J-F925...

Linux Distros Unpatched Vulnerability : CVE-2026-104874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view reflected union operation, operand | d.items,...

adversarial-workflow (>=0.4.0, <=0.9.8), agentiva (>=0.1.0, <=0.1.5) +169 more potentially affected by CVE-2026-104874 via multidict (>=6.7.0, <=6.8.0)

multidict PYPI version =6.7.0, =0.4.0, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =1.0.5, =25.11.0, =0.7.0, =0.1.3, =0.1.4 - audience-framework 1.0.0 and more Source cves: CVE-2026-104874 Source advisory: SNYK:PYTHON-MULTIDICT-20510280...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via a reference leak in the C extension's items view operations multidictitemsviewor2impl and multidictitemsviewsub1impl, which handle the operand | md.items and md.items - operand set...

CVE-2026-104874

Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view reflected union operation, operand | d.items, in multidictitemsviewor2impl and subtraction operation, d.items - operand, in multidictitemsviewsub1impl fail to release new key-identit...

UBUNTU-CVE-2026-104874

Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view reflected union operation, operand | d.items, in multidictitemsviewor2impl and subtraction operation, d.items - operand, in multidictitemsviewsub1impl fail to release new key-identit...

CVE-2026-104874

Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view reflected union operation, operand | d.items, in multidictitemsviewor2impl and subtraction operation, d.items - operand, in multidictitemsviewsub1impl fail to release new key-identit...

CVE-2026-104874

A flaw was found in multidict. The multidict C extension fails to release object references during certain items-view union and subtraction operations. An attacker could exploit this vulnerability by supplying crafted input sequences to applications performing these operations, triggering...

CVE-2026-104874 Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view reflected union operation, operand | d.items, in multidictitemsviewor2impl and subtraction operation, d.items - operand, in multidictitemsviewsub1impl fail to release new key-identit...

CVE-2026-104874

Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view reflected union operation, operand | d.items, in multidictitemsviewor2impl and subtraction operation, d.items - operand, in multidictitemsviewsub1impl fail to release new key-identit...

CVE-2026-104874 Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view reflected union operation, operand | d.items, in multidictitemsviewor2impl and subtraction operation, d.items - operand, in multidictitemsviewsub1impl fail to release new key-identit...

actscene-ocr (>=0.1.3, <=0.1.5), adversarial-workflow (>=0.4.0, <=0.9.8) +288 more potentially affected by CVE-2026-104874 via multidict (>=6.3.0, <=6.8.0)

multidict PYPI version =6.3.0, =0.1.3, =0.4.0, =0.1.0, =0.1.0, =0.87.2.dev9, =0.80.1, =0.1.0.dev19, =1.3.0, =0.1.0, =1.0.5, =25.4.0, =26.5.0 and more Source cves: CVE-2026-104874 Source advisory: MEND:CVE-2026-104874...

CVE-2026-104874

The Multidict library (versions 6.7.0 through 6.9.1 ) contains a memory leak vulnerability within its C extension . Specifically, the multidict_itemsview_or2_impl and multidict_itemsview_sub1_impl functions fail to release new key-identity and value references during reflected union (operand | d....