{"schemaVersion":3,"id":"CVE-2026-104874","aliases":["GHSA-54p9-h82j-f925","UBUNTU-CVE-2026-104874","CGA-7rj5-fv4r-2c27","CGA-wm4f-qv7m-mqm2","CGA-226x-9x6g-4qcr","CGA-2j9m-8rgh-638g","CGA-35mv-m499-j8j3","CGA-44f2-3jw9-2gvg","CGA-4f75-8g9r-qj5q","CGA-4mmp-4jwj-xjr6","CGA-53jp-9x6w-4684","CGA-5mc2-hv59-cxcv","CGA-6cjw-f3gr-rmq4","CGA-6hhr-hx4w-2x92","CGA-6r5x-f4r4-x45q","CGA-8vpg-h227-7739","CGA-95qj-8fhw-gq2j","CGA-c668-f5fw-q2pc","CGA-fhjg-p5fw-j359","CGA-fm72-c5pp-65pm","CGA-fv6h-9395-m64p","CGA-fw5v-mrx6-jqvj","CGA-gfg2-85c3-gj7h","CGA-gwcg-q87c-pp94","CGA-hmx8-4hj9-8r52","CGA-hw3g-g536-wwf2","CGA-jchc-42c4-xwx2","CGA-jxhr-p3rh-486g","CGA-m429-38pg-9wv5","CGA-m4w3-xcxq-gj43","CGA-m99c-8267-cfr5","CGA-p2qx-8whp-x4jf","CGA-p4w8-wm24-65m2","CGA-p558-rr3j-7jc9","CGA-p696-9xmg-3vfq","CGA-pf65-6565-2vg9","CGA-pgm5-5rqw-8g96","CGA-q2mm-92pw-w9gg","CGA-q43w-xm44-cp6h","CGA-q8h8-hvq9-h2w5","CGA-qfw2-c5xv-mg8j","CGA-qm6f-67hf-vj29","CGA-qxvh-rmch-7x7q","CGA-r4p4-xfwf-9crc","CGA-rchg-q7rq-5m3v","CGA-rvq8-jrwg-gqg8","CGA-vvfj-ghv7-fcgm","CGA-vxqg-j292-jpvg","CGA-w5w8-64qg-vrpx","CGA-wcrh-67v4-g9gw","CGA-wmq7-r6qj-93hq","CGA-wxp8-mqr4-53fv","CGA-xwvc-xj98-cjqx","openSUSE-SU-2026:12117-1","PYSEC-2026-4244"],"status":"published","duplicateOf":null,"title":null,"description":"Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view reflected union operation, operand | d.items(), in multidict_itemsview_or2_impl and subtraction operation, d.items() - operand, in multidict_itemsview_sub1_impl fail to release new key-identity and value references returned for each operand element. Applications that perform these operations over attacker-influenced sequences can leak two strong references per element, and garbage collection cannot reclaim them, so repeated operations can cause unbounded process memory growth and denial of service. Forward union, intersection, non-tuple operand elements, and pure-Python builds are not affected by this reference leak. This issue is fixed in version 6.9.1.","dates":{"published":"2026-10-02T20:21:50.903Z","modified":"2026-10-05T16:25:56.621Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Pypi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00297,"percentile":0.21113,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-03T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00297,"percentile":0.21113}],"last30":[{"date":"2026-10-03T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00297,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00297,"percentile":0.21113}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-401","name":"Missing Release of Memory after Effective Lifetime","description":"The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.","type":"weakness","status":"Draft","abstraction":"Variant","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/401.html"}],"affected":[{"vendor":"aio-libs","product":"multidict","name":"multidict","label":"multidict","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.7.0, < 6.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.7.0, < 6.9.1","eol":null,"hubHref":"/vendor/aio-libs/multidict"},{"vendor":"chainguard","product":"airflow-2","name":"airflow-2","label":"airflow-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"airflow-core-2","name":"airflow-core-2","label":"airflow-core-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-core-2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-2025.12","name":"authentik-2025.12","label":"authentik-2025.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-2025.12","purlType":"apk","versions":[{"text":"< 2025.12.6-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.12.6-r18","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-2026.2","name":"authentik-2026.2","label":"authentik-2026.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-2026.2","purlType":"apk","versions":[{"text":"< 2026.2.7-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.2.7-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-2026.5","name":"authentik-2026.5","label":"authentik-2026.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-2026.5","purlType":"apk","versions":[{"text":"< 2026.5.7-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.5.7-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-fips-2025.12","name":"authentik-fips-2025.12","label":"authentik-fips-2025.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-fips-2025.12","purlType":"apk","versions":[{"text":"< 2025.12.6-r18","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 2025.12.6-r18 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-fips-2026.2","name":"authentik-fips-2026.2","label":"authentik-fips-2026.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-fips-2026.2","purlType":"apk","versions":[{"text":"< 2026.2.7-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.2.7-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"authentik-fips-2026.5","name":"authentik-fips-2026.5","label":"authentik-fips-2026.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/authentik-fips-2026.5","purlType":"apk","versions":[{"text":"< 2026.5.7-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.5.7-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"crossplane-function-pythonic","name":"crossplane-function-pythonic","label":"crossplane-function-pythonic","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/crossplane-function-pythonic","purlType":"apk","versions":[{"text":"< 0.6.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"litellm","name":"litellm","label":"litellm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/litellm","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.104.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.104.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mlflow-fips","name":"mlflow-fips","label":"mlflow-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mlflow-fips","purlType":"apk","versions":[{"text":"< 3.16.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.16.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nemo-rl-cuda-13.0","name":"nemo-rl-cuda-13.0","label":"nemo-rl-cuda-13.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nemo-rl-cuda-13.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.7.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.7.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nemo-rl-cuda-13.0-automodel","name":"nemo-rl-cuda-13.0-automodel","label":"nemo-rl-cuda-13.0-automodel","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nemo-rl-cuda-13.0-automodel","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.7.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.7.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nemo-rl-cuda-13.0-mcore","name":"nemo-rl-cuda-13.0-mcore","label":"nemo-rl-cuda-13.0-mcore","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nemo-rl-cuda-13.0-mcore","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.7.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.7.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nemo-rl-cuda-13.0-sglang","name":"nemo-rl-cuda-13.0-sglang","label":"nemo-rl-cuda-13.0-sglang","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nemo-rl-cuda-13.0-sglang","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.7.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.7.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nemo-rl-cuda-13.0-vllm","name":"nemo-rl-cuda-13.0-vllm","label":"nemo-rl-cuda-13.0-vllm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nemo-rl-cuda-13.0-vllm","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.7.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.7.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"puppygraph-python","name":"puppygraph-python","label":"puppygraph-python","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/puppygraph-python","purlType":"apk","versions":[{"text":"< 0.1.7_git20260827-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.7_git20260827-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3-cassandra-medusa","name":"py3-cassandra-medusa","label":"py3-cassandra-medusa","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3-cassandra-medusa","purlType":"apk","versions":[{"text":"< 0.30.1-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.30.1-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.12-airflow-3","name":"py3.12-airflow-3","label":"py3.12-airflow-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.12-airflow-3","purlType":"apk","versions":[{"text":"< 3.3.2-r2","noFixRecorded":false,"fixedIn":null},{"text":"< 3.3.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.2-r2 | < 3.3.2-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.13-airflow-3","name":"py3.13-airflow-3","label":"py3.13-airflow-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.13-airflow-3","purlType":"apk","versions":[{"text":"< 3.3.2-r2","noFixRecorded":false,"fixedIn":null},{"text":"< 3.3.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.2-r2 | < 3.3.2-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.14-airflow-3","name":"py3.14-airflow-3","label":"py3.14-airflow-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.14-airflow-3","purlType":"apk","versions":[{"text":"< 3.3.2-r2","noFixRecorded":false,"fixedIn":null},{"text":"< 3.3.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.2-r2 | < 3.3.2-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"request-1276","name":"request-1276","label":"request-1276","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/request-1276","purlType":"apk","versions":[{"text":"< 0.30.1-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.30.1-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-manager-framework","name":"wazuh-manager-framework","label":"wazuh-manager-framework","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-manager-framework","purlType":"apk","versions":[{"text":"< 4.14.8-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-manager-framework-fips","name":"wazuh-manager-framework-fips","label":"wazuh-manager-framework-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-manager-framework-fips","purlType":"apk","versions":[{"text":"< 4.14.8-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3-cassandra-medusa","name":"py3-cassandra-medusa","label":"py3-cassandra-medusa","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3-cassandra-medusa","purlType":"apk","versions":[{"text":"< 0.30.1-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.30.1-r4","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python-multidict","name":"python-multidict","label":"python-multidict","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python-multidict","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"PyPI","product":"multidict","name":"multidict","label":"multidict","ecosystem":"PyPI","cpePart":null,"purl":"pkg:pypi/multidict","purlType":"pypi","versions":[{"text":"≥ 6.7.0, < 6.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.7.0, < 6.9.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python-multidict&distro=openSUSE Tumbleweed","name":"python-multidict","label":"python-multidict&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-multidict&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 7.0.0-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.0-1.1","eol":null,"hubHref":null}],"affectedCount":29,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/aio-libs/multidict/security/advisories/GHSA-54p9-h82j-f925","label":"github.com/aio-libs/multidict/security/advisories/GHSA-54p9-h82j-f925","hostname":"github.com","tags":["X Refsource CONFIRM","WEB","REPORT","Advisory"]},{"url":"https://github.com/aio-libs/multidict/commit/350b4a07bf8ff851b6d7544e81b1c748bdc74c40","label":"github.com/aio-libs/multidict/commit/350b4a07bf8ff851b6d7544e81b1c748bdc74c40","hostname":"github.com","tags":["X Refsource MISC","WEB","REPORT","FIX"]},{"url":"https://github.com/aio-libs/multidict/releases/tag/v6.9.1","label":"github.com/aio-libs/multidict/releases/tag/v6.9.1","hostname":"github.com","tags":["X Refsource MISC","WEB","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104874","label":"nvd.nist.gov/vuln/detail/CVE-2026-104874","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/aio-libs/multidict","label":"github.com/aio-libs/multidict","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://ubuntu.com/security/CVE-2026-104874","label":"ubuntu.com/security/CVE-2026-104874","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-104874","label":"www.cve.org/CVERecord?id=CVE-2026-104874","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/104xxx/CVE-2026-104874.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/104xxx/CVE-2026-104874.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-104874","label":"www.suse.com/security/cve/CVE-2026-104874","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://pypi.org/project/multidict","label":"pypi.org/project/multidict","hostname":"pypi.org","tags":["PACKAGE"]},{"url":"https://github.com/advisories/GHSA-54p9-h82j-f925","label":"github.com/advisories/GHSA-54p9-h82j-f925","hostname":"github.com","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-02T20:21:50.903Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-05T16:25:56.621Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T19:17:07.714Z","stale":false,"partial":false}}