Commits

Commit history

1. Commits on Oct 29, 2026

   • gh-160898: Reject null bytes in `socket.getaddrinfo()` host and port (#160899)

     Show description for 131a3a6
     

     sethmlarson

     and

     StanFromIreland

     authored
     131a3a6View commit details

     Copy full SHA for 131a3a6

     Browse repository at this point
2. Commits on Sep 30, 2026

   • gh-156293: Use-after-free for server-side SSLContext with sni_callback (#158504)

     Show description for 34a53dc
     

     sethmlarson

     and

     gpshead

     authored
     34a53dcView commit details

     Copy full SHA for 34a53dc

     Browse repository at this point

   • gh-156793: Validate SSLContext.wrap_bio() parameters like wrap_socket() (#158503)

     Show description for 1697ea3
     

     3 peopleauthored
     1697ea3View commit details

     Copy full SHA for 1697ea3

     Browse repository at this point
3. Commits on Aug 18, 2026

   • gh-155292: Don't consider Unicode codepoint attributes outside RFC 3454 (GH-155293)

     Show description for 7e109d0
     

     3 peopleauthored
     7e109d0View commit details

     Copy full SHA for 7e109d0

     Browse repository at this point
4. Commits on Jun 23, 2026

   • gh-143927: Normalize all line endings (CR, CRLF, and LF) in configparser (GH-143929)

     sethmlarson

     authored
     5858e42View commit details

     Copy full SHA for 5858e42

     Browse repository at this point
5. Commits on Jun 2, 2026

   • Add link to new security policy (#150800)

     sethmlarson

     authored
     60ac9b5View commit details

     Copy full SHA for 60ac9b5

     Browse repository at this point

   • gh-149079: Fix O(n^2) canonical ordering in unicodedata.normalize() (GH-149080)

     Show description for 991224b
     

     7 peopleauthored
     991224bView commit details

     Copy full SHA for 991224b

     Browse repository at this point
6. Commits on May 14, 2026

   • gh-149144: Use decodeURIComponent() for UTF-8 support in js_output() (GH-149157)

     sethmlarson

     authored
     461b1d9View commit details

     Copy full SHA for 461b1d9

     Browse repository at this point
7. Commits on Apr 22, 2026

   • gh-90309: Base64-encode cookie values embedded in JS

     sethmlarson

     authored
     76b3923View commit details

     Copy full SHA for 76b3923

     Browse repository at this point
8. Commits on Apr 21, 2026

   • gh-148808: Add boundary check to asyncio.AbstractEventLoop.sock_recvf… (#148809)

     sethmlarson

     authored
     1274766View commit details

     Copy full SHA for 1274766

     Browse repository at this point
9. Commits on Apr 10, 2026

   • gh-146211: Reject CR/LF in HTTP tunnel request headers (#146212)

     Show description for 05ed7ce
     

     sethmlarson

     and

     illia-v

     authored
     05ed7ceView commit details

     Copy full SHA for 05ed7ce

     Browse repository at this point
10. Commits on Mar 20, 2026

    • gh-143930: Reject leading dashes in webbrowser URLs

      sethmlarson

      authored
      82a24a4View commit details

      Copy full SHA for 82a24a4

      Browse repository at this point
11. Commits on Mar 11, 2026

    • Add GitHub team for maintaining fuzzers

      Show description for 805ca4f
      

      sethmlarson

      and

      StanFromIreland

      authored
      805ca4fView commit details

      Copy full SHA for 805ca4f

      Browse repository at this point

    • gh-141707: Skip TarInfo DIRTYPE normalization during GNU long name handling

      Show description for 42d754e
      

      sethmlarson

      and

      e-nomem

      authored
      42d754eView commit details

      Copy full SHA for 42d754e

      Browse repository at this point
12. Commits on Feb 12, 2026

    • gh-143916: Allow HTAB in wsgiref header values

      Show description for 66da7bf
      

      sethmlarson

      and

      vstinner

      authored
      66da7bfView commit details

      Copy full SHA for 66da7bf

      Browse repository at this point
13. Commits on Feb 5, 2026

    • gh-74453: Deprecate os.path.commonprefix (#144436)

      Show description for 957f9fe
      

      3 peopleauthored
      957f9feView commit details

      Copy full SHA for 957f9fe

      Browse repository at this point

    • gh-144484: Warn users not to use wsgiref in production

      sethmlarson

      authored
      7e777c5View commit details

      Copy full SHA for 7e777c5

      Browse repository at this point
14. Commits on Feb 3, 2026

    • gh-74453: Add stronger security warning to os.path.commonprefix (GH-144401)

      sethmlarson

      authored
      4e15b8dView commit details

      Copy full SHA for 4e15b8d

      Browse repository at this point
15. Commits on Feb 2, 2026

    • gh-144376: Only run 'address' fuzzer for python3-libraries (#144398)

      sethmlarson

      authored
      5f91577View commit details

      Copy full SHA for 5f91577

      Browse repository at this point
16. Commits on Jan 23, 2026

    • gh-144125: email: verify headers are sound in BytesGenerator

      Show description for 052e55e
      

      4 peopleauthored
      052e55eView commit details

      Copy full SHA for 052e55e

      Browse repository at this point
17. Commits on Jan 20, 2026

    • gh-143919: Reject control characters in http cookies

      Show description for 95746b3
      

      3 peopleauthored
      95746b3View commit details

      Copy full SHA for 95746b3

      Browse repository at this point

    • gh-143923: Reject control characters in POP3 commands

      sethmlarson

      authored
      b234a2bView commit details

      Copy full SHA for b234a2b

      Browse repository at this point

    • gh-143925: Reject control characters in data: URL mediatypes

      sethmlarson

      authored
      f25509eView commit details

      Copy full SHA for f25509e

      Browse repository at this point

    • gh-143921: Reject control characters in IMAP commands

      sethmlarson

      authored
      6262704View commit details

      Copy full SHA for 6262704

      Browse repository at this point
18. Commits on Jan 19, 2026

    • gh-143935: Email preserve parens when folding comments (#143936)

      Show description for 17d1490
      

      sethmlarson

      and

      beledouxdenis

      authored
      17d1490View commit details

      Copy full SHA for 17d1490

      Browse repository at this point
19. Commits on Jan 17, 2026

    • gh-143916: Reject control characters in wsgiref.headers.Headers (GH-143917)

      Show description for f7fceed
      sethmlarson

      authored
      f7fceedView commit details

      Copy full SHA for f7fceed

      Browse repository at this point
20. Commits on Jan 16, 2026

    • gh-143572: Run 'python3-libraries' fuzzer in CI using CIFuzz (#143749)

      Show description for edeebe2
      

      3 peopleauthored
      edeebe2View commit details

      Copy full SHA for edeebe2

      Browse repository at this point
21. Commits on Dec 3, 2025

    • gh-142145: Remove quadratic behavior in node ID cache clearing (GH-142146)

      Show description for 08d8e18
      

      sethmlarson

      and

      jacobtylerwalls

      authored
      08d8e18View commit details

      Copy full SHA for 08d8e18

      Browse repository at this point
22. Commits on Sep 25, 2025

    • gh-139330: Check expat version/checksum in SBOM with refresh.sh

      Show description for 89b5571
      sethmlarson

      authored
      89b5571View commit details

      Copy full SHA for 89b5571

      Browse repository at this point
23. Commits on May 24, 2025

    • gh-128840: Limit the number of parts in IPv6 address parsing (GH-128841)

      Show description for 47f1161
      

      4 peopleauthored
      47f1161View commit details

      Copy full SHA for 47f1161

      Browse repository at this point
24. Commits on Jan 31, 2025

    • gh-105704: Disallow square brackets (`[` and `]`) in domain names for parsed URLs (#129418)

      Show description for d89a5f6
      

      sethmlarson

      and

      ZeroIntensity

      authored
      d89a5f6View commit details

      Copy full SHA for d89a5f6

      Browse repository at this point
25. Commits on Nov 15, 2024

    • Add PEP 761 to What's New (#126550)

      Show description for a2c180f
      

      sethmlarson

      and

      hugovk

      authored
      a2c180fView commit details

      Copy full SHA for a2c180f

      Browse repository at this point
26. Commits on Nov 13, 2024

    • gh-126623: Update libexpat to 2.6.4, make future updates easier (GH-126792)

      Show description for 3c99969
      sethmlarson

      authored
      3c99969View commit details

      Copy full SHA for 3c99969

      Browse repository at this point
27. Commits on Sep 7, 2024

    • gh-122792: Make IPv4-mapped IPv6 address properties consistent with IPv4 (GH-122793)

      Show description for 76a1c5d
      sethmlarson

      authored
      76a1c5dView commit details

      Copy full SHA for 76a1c5d

      Browse repository at this point
28. Commits on Sep 4, 2024

    • gh-123678: Upgrade libexpat 2.6.3 (#123689)

      Show description for 40bdb0d
      sethmlarson

      authored
      40bdb0dView commit details

      Copy full SHA for 40bdb0d

      Browse repository at this point