VDB
CVE-2026-104874
CVE-2026-104874
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction
EPSS 0.45% · 38.9th percentile
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.45%
38.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | wazuh-manager | 0 |
| chainguard | request-1276 | 0 |
| chainguard | airflow-3 | 0 |
| chainguard | py3-cassandra-medusa | 0 |
| chainguard | nemo-rl-cuda-13.0 | 0 |
| chainguard | authentik-2026.2 | 0 |
| chainguard | puppygraph-python | 0 |
| aio-libs | multidict | 6.7.0 |
| chainguard | authentik-fips-2026.5 | 0 |
| chainguard | authentik-2025.12 | 0 |
| wolfi | py3-cassandra-medusa | 0 |
| chainguard | crossplane-function-pythonic | 0 |
| chainguard | authentik-2026.5 | 0 |
| chainguard | mlflow-fips | 0 |
| chainguard | litellm | 0 |
| chainguard | wazuh-manager-fips | 0 |
| chainguard | authentik-fips-2026.2 | 0 |
| chainguard | authentik-fips-2025.12 | 0 |
| PyPI | multidict | 6.7.0 |
Timeline
- Oct 2, 2026 CVE Published
- Oct 3, 2026 EPSS Score
- Oct 6, 2026 EPSS Score
- Oct 6, 2026 CVE Updated
- Oct 9, 2026 EPSS Score
- Oct 13, 2026 EPSS Score
- Oct 14, 2026 EPSS Score
- Oct 17, 2026 EPSS Score
- Oct 20, 2026 EPSS Score
- Oct 21, 2026 EPSS Score
- Oct 24, 2026 EPSS Score
- Oct 25, 2026 EPSS Score
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-104874 advisory
- https://github.com/advisories/GHSA-54p9-h82j-f925 advisory
- https://github.com/aio-libs/multidict/security/advisories/GHSA-54p9-h82j-f925 url
- https://github.com/aio-libs/multidict/commit/350b4a07bf8ff851b6d7544e81b1c748bdc74c40 patch
- https://github.com/aio-libs/multidict/releases/tag/v6.9.1 url