-
-
Notifications
You must be signed in to change notification settings - Fork 32k
Issues: python/cpython
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Author
Label
Projects
Milestones
Assignee
Sort
Issues list
A Series of Simple DOS Vulnerabilities
3.9
only security fixes
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
3.13
bugs and security fixes
3.14
bugs and security fixes
stdlib
Python modules in the Lib dir
topic-email
topic-IDLE
type-security
A security issue
#134873
opened May 29, 2025 by
kexinoh
Use-after-free in only security fixes
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
3.13
bugs and security fixes
3.14
bugs and security fixes
3.15
new features, bugs and security fixes
interpreter-core
(Objects, Python, Grammar, and Parser dirs)
release-blocker
topic-unicode
type-crash
A hard crash of the interpreter, possibly with a core dump
type-security
A security issue
unicode_escape
decoder with error handler
3.9
#133767
opened May 9, 2025 by
sethmlarson
Report of Open Redirect Vulnerability in Python 3.9.19 - Utilizing Simple HTTP
3.9
only security fixes
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
3.13
bugs and security fixes
3.14
bugs and security fixes
pending
The issue will be closed if no feedback is provided
stdlib
Python modules in the Lib dir
type-bug
An unexpected behavior, bug, or error
type-security
A security issue
#132826
opened Apr 23, 2025 by
hnagashimauu
TarFile.extractall(..., filter='tar') arbitrary file chmod
3.9
only security fixes
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
3.13
bugs and security fixes
3.14
bugs and security fixes
stdlib
Python modules in the Lib dir
type-bug
An unexpected behavior, bug, or error
type-security
A security issue
#127987
opened Dec 16, 2024 by
jwilk
__class_getitem__ Unexpectedly Falls Back to the Metaclass
3.7 (EOL)
end of life
3.8 (EOL)
end of life
3.9
only security fixes
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
3.13
bugs and security fixes
3.14
bugs and security fixes
interpreter-core
(Objects, Python, Grammar, and Parser dirs)
topic-typing
type-bug
An unexpected behavior, bug, or error
#122634
opened Aug 3, 2024 by
ericsnowcurrently
Deadlock in Py_EndInterpreter following bpo-1596321: Fix threading._shutdown() for the main thread
3.9
only security fixes
3.10
only security fixes
3.11
only security fixes
topic-subinterpreters
type-bug
An unexpected behavior, bug, or error
#122517
opened Jul 31, 2024 by
jdoc-sag
Missing audit events for end of life
3.9
only security fixes
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
3.13
bugs and security fixes
3.14
bugs and security fixes
topic-repl
Related to the interactive shell
type-security
A security issue
python -i
and python -m asyncio
3.8 (EOL)
#121957
opened Jul 18, 2024 by
ambv
OOM vulnerability in the CGI server on Windows
3.8 (EOL)
end of life
3.9
only security fixes
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
3.13
bugs and security fixes
3.14
bugs and security fixes
stdlib
Python modules in the Lib dir
topic-IO
type-security
A security issue
#119452
opened May 23, 2024 by
serhiy-storchaka
Out-of-memory when reading a HTTP response with large Content-Lenght
3.8 (EOL)
end of life
3.9
only security fixes
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
3.13
bugs and security fixes
3.14
bugs and security fixes
stdlib
Python modules in the Lib dir
topic-IO
type-security
A security issue
#119451
opened May 23, 2024 by
serhiy-storchaka
Quadratic complexity in the UTF-7 decoder
3.8 (EOL)
end of life
3.9
only security fixes
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
3.13
bugs and security fixes
3.14
bugs and security fixes
interpreter-core
(Objects, Python, Grammar, and Parser dirs)
topic-unicode
type-security
A security issue
#119382
opened May 22, 2024 by
serhiy-storchaka
Out-of-memory when loading a Plist
3.8 (EOL)
end of life
3.9
only security fixes
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
3.13
bugs and security fixes
3.14
bugs and security fixes
type-security
A security issue
#119342
opened May 21, 2024 by
serhiy-storchaka
asyncgen.athrow() checks args on asyncgen.athrow().send() but should check them on asyncgen.athrow()
3.8 (EOL)
end of life
3.9
only security fixes
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
3.13
bugs and security fixes
interpreter-core
(Objects, Python, Grammar, and Parser dirs)
type-bug
An unexpected behavior, bug, or error
#117852
opened Apr 13, 2024 by
graingert
DoS Vulnerability in socket.create_connection through malicious DNS responses
3.8 (EOL)
end of life
3.9
only security fixes
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
3.13
bugs and security fixes
stdlib
Python modules in the Lib dir
type-security
A security issue
#106283
opened Jun 30, 2023 by
NyanKiyoshi
ntpath.realpath() mishandles filenames that resemble drives
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
OS-windows
type-bug
An unexpected behavior, bug, or error
#102475
opened Mar 6, 2023 by
barneygale
Disallow calling PyThreadState_Delete* at runtime shutdown
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
interpreter-core
(Objects, Python, Grammar, and Parser dirs)
type-crash
A hard crash of the interpreter, possibly with a core dump
#102233
opened Feb 25, 2023 by
kumaraditya303
ProcessPoolExecutor should not share one BrokenProcessPool exception among all futures
3.9
only security fixes
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
stdlib
Python modules in the Lib dir
topic-multiprocessing
type-bug
An unexpected behavior, bug, or error
#101267
opened Jan 23, 2023 by
daniel-shields
os.path.normpath of relative path r".\C:\x" returns absolute path r"C:\x" on Windows, similar in pathlib
3.7 (EOL)
end of life
3.8 (EOL)
end of life
3.9
only security fixes
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
OS-windows
stdlib
Python modules in the Lib dir
type-bug
An unexpected behavior, bug, or error
type-security
A security issue
#100162
opened Dec 10, 2022 by
gpshead
Add audit events for thread creation/close
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
extension-modules
C modules in the Modules dir
#99377
opened Nov 11, 2022 by
zooba
Resource tracker fails to track filenames with colons on Linux
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
topic-multiprocessing
type-bug
An unexpected behavior, bug, or error
#98896
opened Oct 31, 2022 by
maaleske
realpath has a race condition which might cause it to throw spurious exceptions
3.10
only security fixes
3.11
only security fixes
3.12
only security fixes
extension-modules
C modules in the Modules dir
type-bug
An unexpected behavior, bug, or error
#97566
opened Sep 26, 2022 by
bitonic
Callbacks pended by only security fixes
3.11
only security fixes
3.12
only security fixes
interpreter-core
(Objects, Python, Grammar, and Parser dirs)
type-bug
An unexpected behavior, bug, or error
Py_AddPendingCall
will never be invoked if the main thread doesn't release GIL
3.10
#95820
opened Aug 9, 2022 by
JiayiFeng
Previous Next
ProTip!
Type g p on any issue or pull request to go back to the pull request listing page.