Skip to content

[3.10] gh-145599, CVE 2026-3644: Reject control characters in http.cookies.Morsel.update() (#145600) - #146027

Merged
pablogsal merged 2 commits into
python:3.10from
vstinner:cookies10
Jun 27, 2026
Merged

[3.10] gh-145599, CVE 2026-3644: Reject control characters in http.cookies.Morsel.update() (#145600)#146027
pablogsal merged 2 commits into
python:3.10from
vstinner:cookies10

Commits

  1. Commits on Mar 16, 2026