Commits

History for

Commits on Jul 4, 2026

[3.11] gh-151987: Pass filter_function to TarFile._extract_one() during .extract() (GH-151988) (#152612)

authored
[3.11] gh-149486: tarfile.data_filter: validate written link target (GH-149487) (#150904)

authored

Commits on Jun 28, 2026

[3.11] gh-145599, CVE 2026-3644: Reject control characters in `http.cookies.Morsel.update()` (GH-145600) (#146026)

authored
[3.11] gh-150743: Limit trailer lines and interim responses read by http.client (GH-150749) (#152528)
miss-islington
authored

Commits on May 17, 2026

[3.11] gh-144370: Disallow usage of control characters in status in wsgiref.handlers for security (#144371) (#145672)
vstinner
authored

Commits on Apr 30, 2026

Commits on Apr 13, 2026

[3.11] gh-148169: Fix webbrowser `%action` substitution bypass of dash-prefix check (GH-148170) (#148520)
StanFromIreland
authored

Commits on Apr 8, 2026

[3.11] gh-145986: Avoid unbound C recursion in `conv_content_model` in `pyexpat.c` (CVE 2026-4224) (GH-145987) (#146000)

StanFromIreland
and
picnixz
authored

Commits on Apr 7, 2026

[3.11] gh-137586: Open external osascript program with absolute path (GH-137584) (#148176)

authored

Commits on Apr 3, 2026

[3.11] gh-143930: Tweak the exception message and increase test coverage (GH-146476) (GH-148045) (GH-148051) (GH-148052)

miss-islington
and
ambv
authored

Commits on Mar 24, 2026

[3.11] gh-143930: Reject leading dashes in webbrowser URLs (GH-143931) (GH-146364)

tomcruiseqi
and
sethmlarson
authored

Commits on Mar 3, 2026

Python 3.11.15
pablogsal
committed

Commits on Mar 2, 2026

Commits on Jan 25, 2026

Commits on Jan 20, 2026

[3.11] gh-143916: Reject control characters in wsgiref.headers.Headers

gpshead
and
sethmlarson
authored

Commits on Nov 25, 2025

[3.11] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) (#139529)

hartwork
and
picnixz
authored

Commits on Oct 9, 2025

Commits on Oct 8, 2025

[3.11] gh-139700: Check consistency of the zip64 end of central directory record (GH-139702) (GH-139708) (GH-139713)

miss-islington
and
serhiy-storchaka
authored