PYSEC-2026-4244 Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

Description A reference leak in the items-view union and subtraction operators of aio-libs/multidict 6.7.0 through 6.9.0 C extension lets a remote client drive unbounded, unreclaimable memory growth by having each operand element leak one key-identity object and one value object. The...

GHSA-54P9-H82J-F925 Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

Description A reference leak in the items-view union and subtraction operators of aio-libs/multidict 6.7.0 through 6.9.0 C extension lets a remote client drive unbounded, unreclaimable memory growth by having each operand element leak one key-identity object and one value object. The...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via a reference leak in the C extension's items view operations multidictitemsviewor2impl and multidictitemsviewsub1impl, which handle the operand | md.items and md.items - operand set...

CVE-2026-104874

The Multidict library (versions 6.7.0 through 6.9.1 ) contains a memory leak vulnerability within its C extension . Specifically, the multidict_itemsview_or2_impl and multidict_itemsview_sub1_impl functions fail to release new key-identity and value references during reflected union (operand | d....