diff --git a/python-multipart.spec b/python-multipart.spec
index 3b5e277cd071f0ca2e10c39cd095b47cedf8668b..df65f75013efbfbc9f7b70781969f19780bcaa18 100644
--- a/python-multipart.spec
+++ b/python-multipart.spec
@@ -1,7 +1,7 @@
 %define anolis_release 1
 %global pypi_name python_multipart
 %global pkgname multipart
-%global pypi_version 0.0.22
+%global pypi_version 0.0.26
 
 Name:           python-%{pkgname}
 Version:        %{pypi_version}
@@ -17,6 +17,7 @@ BuildRequires:  python3-devel
 BuildRequires:  python3dist(setuptools)
 BuildRequires:  python3dist(pytest)
 BuildRequires:  python3dist(pyyaml)
+BuildRequires:  python3dist(hatchling)
 
 %description
 A streaming multipart parser for Python
@@ -56,8 +57,12 @@ sed -i '\|Programming Language :: Python :: 3\.14|d' pyproject.toml
 %{python3_sitelib}/multipart/
 
 %changelog
+* Mon Apr 20 2026 tomcruiseqi <tomcruiseqi@inspur.com> - 0.0.26-1
+- Update to 0.0.26
+- Fix CVE-2026-40347
+
 * Wed Feb 11 2026 lzq11122 <lzq02303433@alibaba-inc.com> - 0.0.22-1
 - Update to 0.0.22 fix CVE-2026-24486
 
 * Thu Apr 11 2024 Shenglong Zhu <shenglongzhu@linux.alibaba.com> - 0.0.9-1
-- Initial package.
+- Initial package.
\ No newline at end of file
diff --git a/python_multipart-0.0.22.tar.gz b/python_multipart-0.0.22.tar.gz
deleted file mode 100644
index 22b4ee690e08d6aecd31c311f092400c6f7d3cb2..0000000000000000000000000000000000000000
Binary files a/python_multipart-0.0.22.tar.gz and /dev/null differ
diff --git a/python_multipart-0.0.26.tar.gz b/python_multipart-0.0.26.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..71c78af3c546b309d10d82afd49db3559e901973
Binary files /dev/null and b/python_multipart-0.0.26.tar.gz differ