Distrust compromised intermediate certificates in ssl module

Use-after-free of a server-side SSLContext when sni_callback switches contexts

Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes

tarfile extraction filters allow file modification and content disclosure via hard link to symlink

tarfile opened in streaming mode mishandles EOF

bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

tarfile extraction filter bypass allows escaping the destination directory

SSLContext.wrap_bio() missing validation of server_hostname parameter

Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations

The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs

Regular-expression DoS when parsing TarFile headers

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

tar filter allows writing outside destination via empty-named symlink

tarfile.data_filter path traversal bypass allows writing outside the extraction directory

tarfile extraction filter bypass allows creation of directories outside the destination

Potential DoS via quadratic complexity in unicodedata.normalize()

BaseCookie.js_output() does not neutralize embedded characters

`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

stringprep.map_table_b2() deviates from RFC 3454 Table B.2

Base64 decoding stops at first padded quad by default

Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address

tarfile hardlink fallback ignores custom extraction filter rejection via None

HTTP client proxy tunnel headers not validated for CR/LF

Configuration Injection via Carriage Return (\r) in write() method

Tarfile.extract() doesn't fully respect filter parameter

CPython >3.11 Insecure Input Validation resulting in privilege escalation

Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target

Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()

Default mimetype known files writeable on Windows

zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

Lenient parsing of integers for response body and chunk framing

Quadratic Behavior in xml.etree.ElementPath Index Predicates