Skip to content

[3.13] gh-145599, CVE 2026-3644: Reject control characters in http.cookies.Morsel.update() (GH-145600)#146024

Merged
vstinner merged 1 commit intopython:3.13from
miss-islington:backport-57e88c1-3.13
Mar 16, 2026
Merged

[3.13] gh-145599, CVE 2026-3644: Reject control characters in http.cookies.Morsel.update() (GH-145600)#146024
vstinner merged 1 commit intopython:3.13from
miss-islington:backport-57e88c1-3.13

Commits

Commits on Mar 16, 2026