Python3.11

Infinite loop when iterating over zip archive entry names from zipfile.Path

also in 3 other products

Python Software Foundation CPython: Uncontrolled Resource Consumption

also in 17 other products

Use-after-free of a server-side SSLContext when sni_callback switches contexts

also in 2 other products

SSLContext.wrap_bio() missing validation of server_hostname parameter

also in 2 other products

bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow

also in 2 other products

stringprep.map_table_b2() deviates from RFC 3454 Table B.2

also in 2 other products

Incorrect IPv4 and IPv6 private ranges

also in 1 other product

FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address

also in 3 other products

Python-markdown Markdown: Information Disclosure

also in 1 other product

`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

also in 2 other products

Memory race condition in ssl.SSLContext certificate store methods

also in 1 other product

Incomplete control character validation in http.cookies

also in 14 other products

Potential DoS via quadratic complexity in unicodedata.normalize()

also in 2 other products

HTTP client proxy tunnel headers not validated for CR/LF

also in 4 other products

Python Software Foundation CPython: Uncontrolled Resource Consumption

also in 1 other product

BaseCookie.js_output() does not neutralize embedded characters

also in 14 other products

Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()

also in 1 other product