CVE-2026-104874
MediumAdvisory
Published 5 Oct 2026In the index since 6 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.003
- 20th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 119
- of 18,026 indexed, latest versions
- Container images
- 113
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction
Carried by container images the latest versions of 119 of 18,026 indexed charts deploy, on 113 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| multidictpypi | 6.7.0, 6.7.1, 6.8.0, 6.9.0 | 6.9.1 | 112 |
| python-multidictdeb | 6.0.4-1.1build1 | no fix listed | 1 |
- OSV records
- GHSA-54p9-h82j-f925UBUNTU-CVE-2026-104874
Charts affected
119 by stars
Container images carrying it
113 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | aa810a36942c | multidict | 6.9.1 | 4 |
| ghcr.io/ | 896fc7b18b1b | multidict | 6.9.1 | 3 |
| ghcr.io/ | 5fa76604a81d | multidict | 6.9.1 | 3 |
| gisaia/ | 8b88432c8d1f | multidict | 6.9.1 | 2 |
| gisaia/ | 86e69fdc9d9e | multidict | 6.9.1 | 2 |
| gisaia/ | ff9526c6276c | multidict | 6.9.1 | 2 |
| ilum/ | 624fd09528c8 | multidict | 6.9.1 | 2 |
| langflowai/ | 4304bd9e67db | multidict | 6.9.1 | 2 |
| nacos/ | 1c191c30c8cd | multidict | 6.9.1 | 2 |
| nousresearch/ | fca358f12efd | multidict | 6.9.1 | 2 |
| polyaxon/ | da877a2647fc | multidict | 6.9.1 | 2 |
| polyaxon/ | 297ed47ed63a | multidict | 6.9.1 | 2 |
| safeglobal/ | 09a5e495c219 | multidict | 6.9.1 | 2 |
| safeglobal/ | 7b576c73f865 | multidict | 6.9.1 | 2 |
| ghcr.io/ | ab9b4e8cc4ab | multidict | 6.9.1 | 2 |
| ghcr.io/ | 647a3c938d31 | multidict | 6.9.1 | 2 |
| acryldata/ | c5fd70130157 | multidict | 6.9.1 | 1 |
| agentarea/ | f9033ebe2e00 | multidict | 6.9.1 | 1 |
| agentarea/ | f4745afdace1 | multidict | 6.9.1 | 1 |
| aibrix/ | 63fb81a64377 | multidict | 6.9.1 | 1 |
| archivebox/ | 8c21bb233130 | multidict | 6.9.1 | 1 |
| arunvelsriram/ | 655ad18fd8d6 | python-multidict | no fix listed | 1 |
| berkeleyskypilot/ | 8da2f3cda472 | multidict | 6.9.1 | 1 |
| burakince/ | ab4b566644b9 | multidict | 6.9.1 | 1 |
| byjg/ | 230fdb7b00ae | multidict | 6.9.1 | 1 |
| checkmk/ | c11b422210c4 | multidict | 6.9.1 | 1 |
| chiefonboarding/ | d0964135ea82 | multidict | 6.9.1 | 1 |
| dagster/ | 7c13aa1c9a7a | multidict | 6.9.1 | 1 |
| datagrok/ | 8c2d48c1545c | multidict | 6.9.1 | 1 |
| dellnoantechnp/ | 034000bbcad5 | multidict | 6.9.1 | 1 |
| dgtlmoon/ | 1d8f72d2ce20 | multidict | 6.9.1 | 1 |
| esphome/ | 4866347cb5b4 | multidict | 6.9.1 | 1 |
| greenkube/ | 0c01932282a4 | multidict | 6.9.1 | 1 |
| homeassistant/ | 5a531753cea9 | multidict | 6.9.1 | 1 |
| intelowlproject/ | 0b22e547ea6b | multidict | 6.9.1 | 1 |
| jertel/ | 3cbf63f9b7dc | multidict | 6.9.1 | 1 |
| jupyterjsc/ | aea53b13f235 | multidict | 6.9.1 | 1 |
| kenchrcum/ | 12fb213debf1 | multidict | 6.9.1 | 1 |
| kenchrcum/ | 84dae7aeea5b | multidict | 6.9.1 | 1 |
| kenchrcum/ | ce657c622ce5 | multidict | 6.9.1 | 1 |
| langflowai/ | 34055a07d446 | multidict | 6.9.1 | 1 |
| langgenius/ | dcefa5f7c47c | multidict | 6.9.1 | 1 |
| langgenius/ | 3c694329357b | multidict | 6.9.1 | 1 |
| langgenius/ | 8269050f192e | multidict | 6.9.1 | 1 |
| litellm/ | 09b217802ded | multidict | 6.9.1 | 1 |
| loeken/ | 4ce6abc553b3 | multidict | 6.9.1 | 1 |
| lumutools/ | e35ffa90b129 | multidict | 6.9.1 | 1 |
| maponyacharles/ | 42d418654ebd | multidict | 6.9.1 | 1 |
| maponyacharles/ | 7b37b092130a | multidict | 6.9.1 | 1 |
| mathesar/ | 091757cb01fe | multidict | 6.9.1 | 1 |