Commits

History for

Commits on Mar 3, 2026

Python 3.10.20
pablogsal
committed

Commits on Mar 2, 2026

[3.10] gh-143935: Email preserve parens when folding comments (GH-143936) (#144350)

edgarrmondragon
and
sethmlarson
authored
[3.10] gh-143916: Allow HTAB in wsgiref header values (#145140)

authored
[3.10] gh-119342: Fix a potential denial of service in plistlib (GH-119343) (#142151)
serhiy-storchaka
authored

Commits on Jan 25, 2026

[3.10] gh-136063: fix quadratic-complexity parsing in `email.message._parseparam` (GH-136072) (#140831)

miss-islington
and
picnixz
authored
[3.10] gh-119451: Fix a potential denial of service in http.client (GH-119454) (#142142)

miss-islington
and
serhiy-storchaka
authored
[3.10] gh-142145: Remove quadratic behavior in node ID cache clearing (GH-142146) (#142213)

authored
[3.10] gh-119452: Fix a potential virtual memory allocation denial of service in http.server (GH-142216) (#142299)

miss-islington
and
serhiy-storchaka
authored
[3.10] gh-144125: email: verify headers are sound in BytesGenerator (#144180)

authored
[3.10] gh-143919: Reject control characters in http cookies (#144094)

authored
[3.10] gh-143925: Reject control characters in data: URL mediatypes (#144115)
sethmlarson
authored

Commits on Jan 20, 2026

[3.10] gh-143916: Reject control characters in wsgiref.headers.Headers

gpshead
and
sethmlarson
authored

Commits on Nov 25, 2025

[3.10] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) (#139532)

hartwork
and
picnixz
authored

Commits on Oct 31, 2025

Commits on Oct 9, 2025

Commits on Oct 7, 2025

Commits on Oct 6, 2025

[3.10] gh-139400: Make sure that parent parsers outlive their subparsers in `pyexpat` (GH-139403) (#139613)
hartwork
authored

Commits on Sep 29, 2025

[3.10] gh-135374: Adjust test for setuptools' replacement of distutils (GH-138796) (GH-139303)

authored

Commits on Sep 13, 2025

[3.10] gh-118350: Fix support of elements "textarea" and "title" in HTMLParser (GH-135310) (GH-137783)

authored

Commits on Sep 2, 2025

[3.10] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027) (#137644)

authored

Commits on Jul 22, 2025

[3.10] gh-135661: Fix parsing attributes with whitespaces around the "=" separator in HTMLParser (GH-136908) (GH-136921)

miss-islington
and
serhiy-storchaka
authored

Commits on Jul 12, 2025

Commits on Jul 3, 2025

[3.10] gh-135462: Fix quadratic complexity in processing special input in HTMLParser (GH-135464) (GH-135485)
serhiy-storchaka
authored

Commits on Jun 11, 2025

[3.10] gh-135374: Update the bundled copy of setuptools to 79.0.1 (#135398)
ambv
authored

Commits on Jun 3, 2025