CVE-2026-104874

A flaw was found in multidict. The multidict C extension fails to release object references during certain items-view union and subtraction operations. An attacker could exploit this vulnerability by supplying crafted input sequences to applications performing these operations, triggering uncollectable memory leaks. This issue can cause unbounded process memory growth, ultimately leading to a Denial of Service (DoS).