tar filter allows writing outside destination via empty-named symlink

tarfile.data_filter path traversal bypass allows writing outside the extraction directory

tarfile extraction filter bypass allows creation of directories outside the destination

Potential DoS via quadratic complexity in unicodedata.normalize()

URL parser allowed square brackets in domain names

BaseCookie.js_output() does not neutralize embedded characters

`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

stringprep.map_table_b2() deviates from RFC 3454 Table B.2

Base64 decoding stops at first padded quad by default

email BytesGenerator header injection due to unquoted newlines

Header injection in http.cookies.Morsel

Header injection via newlines in data URL mediatype

Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address

POP3 command injection in user-controlled commands

IMAP command injection in user-controlled commands

wsgiref.headers.Headers allows header newline injection

Use-after-free in "unicode_escape" decoder with error handler

tarfile hardlink fallback ignores custom extraction filter rejection via None

HTTP client proxy tunnel headers not validated for CR/LF

SourcelessFileLoader does not use io.open_code()

Folding email comments of unfoldable characters doesn't preserve parenthesis

Configuration Injection via Carriage Return (\r) in write() method

Out-of-memory when loading Plist

Quadratic complexity in os.path.expandvars() with user-controlled template

Tarfile.extract() doesn't fully respect filter parameter

CPython >3.11 Insecure Input Validation resulting in privilege escalation

Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target

base64.b64decode() always accepts "+/" characters, despite setting altchars

Quadratic complexity in node ID cache clearing

Bypass extraction filter to modify file metadata outside extraction directory

ZIP64 End of Central Directory (EOCD) Locator record offset not checked

HTMLParser quadratic complexity when processing malformed inputs