Search results

shutil.unpack_archive() on Windows writes outside extract_dir for ZIP entries with drive-prefixed names

3.10only security fixesonly security fixes

3.11only security fixesonly security fixes

3.12only security fixesonly security fixes

3.13bugs and security fixesbugs and security fixes

3.14bugs and security fixesbugs and security fixes

3.15new features, bugs and security fixesnew features, bugs and security fixes

OS-windows

stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory

type-securityA security issueA security issue

Status: Open.

#146581 In python/cpython;

· PuH4ck3rX opened on Mar 28, 2026

HTTP proxy via "CONNECT" tunneling doesn't sanitize CR/LF

3.10only security fixesonly security fixes

3.11only security fixesonly security fixes

3.12only security fixesonly security fixes

3.13bugs and security fixesbugs and security fixes

3.14bugs and security fixesbugs and security fixes

3.15new features, bugs and security fixesnew features, bugs and security fixes

stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory

type-securityA security issueA security issue

Status: Open.

#146211 In python/cpython;

· sethmlarson opened on Mar 20, 2026

[CVE-2026-2297] SourcelessFileLoader does not use io.open_code()

3.10only security fixesonly security fixes

3.11only security fixesonly security fixes

3.12only security fixesonly security fixes

3.13bugs and security fixesbugs and security fixes

3.14bugs and security fixesbugs and security fixes

3.15new features, bugs and security fixesnew features, bugs and security fixes

stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory

topic-importlib

type-securityA security issueA security issue

Status: Open.

#145506 In python/cpython;

· zooba opened on Mar 4, 2026

Skip not properly propagated and wrongly shown as ok

3.10only security fixesonly security fixes

pendingThe issue will be closed if no feedback is providedThe issue will be closed if no feedback is provided

stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory

type-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error

Status: Open.

#139255 In python/cpython;

· herostrat opened on Sep 23, 2025

Potential Quadratic Complexity Vulnerabilities in the email Module

3.10only security fixesonly security fixes

3.11only security fixesonly security fixes

3.12only security fixesonly security fixes

3.13bugs and security fixesbugs and security fixes

3.14bugs and security fixesbugs and security fixes

3.15new features, bugs and security fixesnew features, bugs and security fixes

stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory

topic-email

type-securityA security issueA security issue

Status: Open.

#136063 In python/cpython;

· kexinoh opened on Jun 28, 2025

HTMLParser differences from the HTML5 specification

3.10only security fixesonly security fixes

3.11only security fixesonly security fixes

3.15new features, bugs and security fixesnew features, bugs and security fixes

3.9 (EOL)end of lifeend of life

stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory

type-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error

type-securityA security issueA security issue

Status: Open.

#135661 In python/cpython;

· serhiy-storchaka opened on Jun 18, 2025

TarFile.extractall(..., filter='tar') arbitrary file chmod

3.10only security fixesonly security fixes

3.11only security fixesonly security fixes

3.12only security fixesonly security fixes

3.13bugs and security fixesbugs and security fixes

3.14bugs and security fixesbugs and security fixes

3.9 (EOL)end of lifeend of life

stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory

type-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error

type-securityA security issueA security issue

Status: Open.

#127987 In python/cpython;

· jwilk opened on Dec 16, 2024

__class_getitem__ Unexpectedly Falls Back to the Metaclass

3.10only security fixesonly security fixes

3.11only security fixesonly security fixes

3.12only security fixesonly security fixes

3.13bugs and security fixesbugs and security fixes

3.14bugs and security fixesbugs and security fixes

3.7 (EOL)end of lifeend of life

3.8 (EOL)end of lifeend of life

3.9 (EOL)end of lifeend of life

interpreter-core(Objects, Python, Grammar, and Parser dirs)(Objects, Python, Grammar, and Parser dirs)

topic-typing

type-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error

Status: Open.

#122634 In python/cpython;

· ericsnowcurrently opened on Aug 3, 2024

Missing audit events for python -i and python -m asyncio

3.10only security fixesonly security fixes

3.11only security fixesonly security fixes

3.12only security fixesonly security fixes

3.13bugs and security fixesbugs and security fixes

3.14bugs and security fixesbugs and security fixes

topic-replRelated to the interactive shellRelated to the interactive shell

type-securityA security issueA security issue

Status: Open.

#121957 In python/cpython;

· ambv opened on Jul 18, 2024

Out-of-memory when reading a HTTP response with large Content-Length

3.10only security fixesonly security fixes

3.11only security fixesonly security fixes

3.12only security fixesonly security fixes

3.13bugs and security fixesbugs and security fixes

3.14bugs and security fixesbugs and security fixes

3.15new features, bugs and security fixesnew features, bugs and security fixes

stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory

topic-IO

type-securityA security issueA security issue

Status: Open.

#119451 In python/cpython;

· serhiy-storchaka opened on May 23, 2024

Quadratic complexity in the UTF-7 decoder

3.10only security fixesonly security fixes

3.11only security fixesonly security fixes

3.12only security fixesonly security fixes

3.13bugs and security fixesbugs and security fixes

3.14bugs and security fixesbugs and security fixes

3.15new features, bugs and security fixesnew features, bugs and security fixes

interpreter-core(Objects, Python, Grammar, and Parser dirs)(Objects, Python, Grammar, and Parser dirs)

topic-unicode

type-securityA security issueA security issue

Status: Open.

#119382 In python/cpython;

· serhiy-storchaka opened on May 22, 2024

SystemExit raised in signal handler not propagated to running threads, killing them instead

3.10only security fixesonly security fixes

3.11only security fixesonly security fixes

3.12only security fixesonly security fixes

type-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error

Status: Open.

#107170 In python/cpython;

· sandrinr opened on Jul 24, 2023