Skip to content

[3.14] gh-145599, CVE 2026-3644: Reject control characters in http.cookies.Morsel.update() (GH-145600)#146023

Merged
vstinner merged 1 commit intopython:3.14from
miss-islington:backport-57e88c1-3.14
Mar 16, 2026
Merged

[3.14] gh-145599, CVE 2026-3644: Reject control characters in http.cookies.Morsel.update() (GH-145600)#146023
vstinner merged 1 commit intopython:3.14from
miss-islington:backport-57e88c1-3.14

Commits

Commits on Mar 16, 2026