Skip to content

[3.12] gh-145599, CVE 2026-3644: Reject control characters in http.cookies.Morsel.update() (GH-145600)#146025

Open
miss-islington wants to merge 1 commit intopython:3.12from
miss-islington:backport-57e88c1-3.12
Open

[3.12] gh-145599, CVE 2026-3644: Reject control characters in http.cookies.Morsel.update() (GH-145600)#146025
miss-islington wants to merge 1 commit intopython:3.12from
miss-islington:backport-57e88c1-3.12

Commits

Commits on Mar 16, 2026