P5 Verified
Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction
CVE-2026-104874. EPSS 0.00297 (percentile 0.20381), scored 2026-10-03. Fixed version: 350b4a07bf8ff851b6d7544e81b1c748bdc74c40. Fixed version: 0a1770c7e69845c8ef2000b3707cd7f1917a6944.
- CVE / CWE
- CVE-2026-104874 /
- Vendor / product
- Unavailable / Unavailable
- Severity
- 0.1
- CVSS
- Unavailable · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · osv
- EPSS
- 0.00297 · percentile 0.20381 · 2026-10-03
- KEV
- no · added unavailable · due unavailable · ransomware use unavailable
- Exploit signals
- Signal evidence
Affected products
- Product unavailable · Fixed version: 350b4a07bf8ff851b6d7544e81b1c748bdc74c40
- Product unavailable · Fixed version: 0a1770c7e69845c8ef2000b3707cd7f1917a6944
Provenance
- OSV.dev · Source record · observed 2026-10-04 08:10:59.885464+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-104874.html