{"action":"Upgrade multidict to 6.9.1 or later.","affected":[{"fixed":"6.9.1","introduced":"6.7.0"}],"component":"multidict","cve_ids":["CVE-2026-104874"],"ecosystem":"PyPI","epss":0.00448,"exploited":false,"fixed_versions":["6.9.1"],"ghsa_id":"GHSA-54p9-h82j-f925","id":"tcs_01M5KEZXK3EK9PC4QTPHZ7PVW0","modified_at":"2026-10-15T14:56:05.601333622Z","published_at":"2026-10-05T23:40:58Z","references":["https://osv.dev/vulnerability/GHSA-54p9-h82j-f925","https://github.com/aio-libs/multidict/security/advisories/GHSA-54p9-h82j-f925","https://nvd.nist.gov/vuln/detail/CVE-2026-104874","https://github.com/aio-libs/multidict/commit/350b4a07bf8ff851b6d7544e81b1c748bdc74c40","https://github.com/aio-libs/multidict","https://github.com/aio-libs/multidict/releases/tag/v6.9.1"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-54p9-h82j-f925","url":"https://osv.dev/vulnerability/GHSA-54p9-h82j-f925"}],"summary":"Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction"}