Commits

History for

Commits on Jun 28, 2026

[3.10] gh-150743: Limit trailer lines and interim responses read by http.client (GH-150749) (#152529)
miss-islington
authored

Commits on May 17, 2026

[3.10] gh-144370: Disallow usage of control characters in status in wsgiref.handlers for security (#144371) (#145673)
vstinner
authored

Commits on Apr 30, 2026

[3.10] gh-141707: Skip TarInfo DIRTYPE normalization during GNU long name handling (#145816)

authored
[3.10] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code (GH-145507) (#145516)

authored

Commits on Apr 13, 2026

[3.10] gh-148169: Fix webbrowser `%action` substitution bypass of dash-prefix check (GH-148170) (#148521)
StanFromIreland
authored

Commits on Apr 8, 2026

[3.10] gh-145986: Avoid unbound C recursion in `conv_content_model` in `pyexpat.c` (CVE 2026-4224) (GH-145987) (#146002)

StanFromIreland
and
picnixz
authored

Commits on Apr 7, 2026

[3.10] gh-137586: Open external osascript program with absolute path (GH-137584) (#148177)

authored

Commits on Apr 3, 2026

[3.10] gh-143930: Tweak the exception message and increase test coverage (GH-146476) (GH-148045) (GH-148051) (GH-148053)

miss-islington
and
ambv
authored

Commits on Mar 24, 2026

[3.10] gh-143930: Reject leading dashes in webbrowser URLs (GH-143931) (GH-146359)

tomcruiseqi
and
sethmlarson
authored

Commits on Mar 3, 2026

Python 3.10.20
pablogsal
committed

Commits on Mar 2, 2026

Commits on Jan 25, 2026

Commits on Jan 20, 2026

[3.10] gh-143916: Reject control characters in wsgiref.headers.Headers

gpshead
and
sethmlarson
authored

Commits on Nov 25, 2025

[3.10] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) (#139532)

hartwork
and
picnixz
authored

Commits on Oct 31, 2025

Commits on Oct 9, 2025

Commits on Oct 7, 2025

Commits on Oct 6, 2025

[3.10] gh-139400: Make sure that parent parsers outlive their subparsers in `pyexpat` (GH-139403) (#139613)
hartwork
authored

Commits on Sep 29, 2025

[3.10] gh-135374: Adjust test for setuptools' replacement of distutils (GH-138796) (GH-139303)

authored