Distrust compromised intermediate certificates in ssl module

Arbitrary writes via tarfile realpath overflow

Use-after-free of a server-side SSLContext when sni_callback switches contexts

Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes

tarfile extraction filters allow file modification and content disclosure via hard link to symlink

tarfile opened in streaming mode mishandles EOF

bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

tarfile extraction filter bypass allows escaping the destination directory

Virtual environment (venv) activation scripts don't quote paths

SSLContext.wrap_bio() missing validation of server_hostname parameter

Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations

The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs

Stack overflow parsing XML with deeply nested DTD content models

Incomplete control character validation in http.cookies

Excessive read buffering DoS in http.client

Tarfile infinite loop during parsing with negative member offset

Tarfile extracts filtered members when errorlevel=0

Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

Extraction filter bypass for linking outside extraction directory

Unbounded memory buffering in SelectorSocketTransport.writelines()

Regular-expression DoS when parsing TarFile headers

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

tar filter allows writing outside destination via empty-named symlink

tarfile.data_filter path traversal bypass allows writing outside the extraction directory

tarfile extraction filter bypass allows creation of directories outside the destination

Potential DoS via quadratic complexity in unicodedata.normalize()

URL parser allowed square brackets in domain names

BaseCookie.js_output() does not neutralize embedded characters

`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

stringprep.map_table_b2() deviates from RFC 3454 Table B.2

Base64 decoding stops at first padded quad by default

email BytesGenerator header injection due to unquoted newlines

Header injection in http.cookies.Morsel

Header injection via newlines in data URL mediatype

Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address

POP3 command injection in user-controlled commands

IMAP command injection in user-controlled commands

wsgiref.headers.Headers allows header newline injection

Use-after-free in "unicode_escape" decoder with error handler

tarfile hardlink fallback ignores custom extraction filter rejection via None

HTTP client proxy tunnel headers not validated for CR/LF

SourcelessFileLoader does not use io.open_code()

Folding email comments of unfoldable characters doesn't preserve parenthesis

Configuration Injection via Carriage Return (\r) in write() method

Out-of-memory when loading Plist

Quadratic complexity in os.path.expandvars() with user-controlled template

Tarfile.extract() doesn't fully respect filter parameter