Skip to content

Issues: python/cpython

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort

Issues list

A Series of Simple DOS Vulnerabilities 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes 3.13 bugs and security fixes 3.14 bugs and security fixes stdlib Python modules in the Lib dir topic-email topic-IDLE type-security A security issue
#134873 opened May 29, 2025 by kexinoh
Use-after-free in unicode_escape decoder with error handler 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes 3.13 bugs and security fixes 3.14 bugs and security fixes 3.15 new features, bugs and security fixes interpreter-core (Objects, Python, Grammar, and Parser dirs) release-blocker topic-unicode type-crash A hard crash of the interpreter, possibly with a core dump type-security A security issue
#133767 opened May 9, 2025 by sethmlarson
Report of Open Redirect Vulnerability in Python 3.9.19 - Utilizing Simple HTTP 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes 3.13 bugs and security fixes 3.14 bugs and security fixes pending The issue will be closed if no feedback is provided stdlib Python modules in the Lib dir type-bug An unexpected behavior, bug, or error type-security A security issue
#132826 opened Apr 23, 2025 by hnagashimauu
TarFile.extractall(..., filter='tar') arbitrary file chmod 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes 3.13 bugs and security fixes 3.14 bugs and security fixes stdlib Python modules in the Lib dir type-bug An unexpected behavior, bug, or error type-security A security issue
#127987 opened Dec 16, 2024 by jwilk
__class_getitem__ Unexpectedly Falls Back to the Metaclass 3.7 (EOL) end of life 3.8 (EOL) end of life 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes 3.13 bugs and security fixes 3.14 bugs and security fixes interpreter-core (Objects, Python, Grammar, and Parser dirs) topic-typing type-bug An unexpected behavior, bug, or error
#122634 opened Aug 3, 2024 by ericsnowcurrently
Deadlock in Py_EndInterpreter following bpo-1596321: Fix threading._shutdown() for the main thread 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes topic-subinterpreters type-bug An unexpected behavior, bug, or error
#122517 opened Jul 31, 2024 by jdoc-sag
Missing audit events for python -i and python -m asyncio 3.8 (EOL) end of life 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes 3.13 bugs and security fixes 3.14 bugs and security fixes topic-repl Related to the interactive shell type-security A security issue
#121957 opened Jul 18, 2024 by ambv
OOM vulnerability in the CGI server on Windows 3.8 (EOL) end of life 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes 3.13 bugs and security fixes 3.14 bugs and security fixes stdlib Python modules in the Lib dir topic-IO type-security A security issue
#119452 opened May 23, 2024 by serhiy-storchaka
Out-of-memory when reading a HTTP response with large Content-Lenght 3.8 (EOL) end of life 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes 3.13 bugs and security fixes 3.14 bugs and security fixes stdlib Python modules in the Lib dir topic-IO type-security A security issue
#119451 opened May 23, 2024 by serhiy-storchaka
Quadratic complexity in the UTF-7 decoder 3.8 (EOL) end of life 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes 3.13 bugs and security fixes 3.14 bugs and security fixes interpreter-core (Objects, Python, Grammar, and Parser dirs) topic-unicode type-security A security issue
#119382 opened May 22, 2024 by serhiy-storchaka
Out-of-memory when loading a Plist 3.8 (EOL) end of life 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes 3.13 bugs and security fixes 3.14 bugs and security fixes type-security A security issue
#119342 opened May 21, 2024 by serhiy-storchaka
asyncgen.athrow() checks args on asyncgen.athrow().send() but should check them on asyncgen.athrow() 3.8 (EOL) end of life 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes 3.13 bugs and security fixes interpreter-core (Objects, Python, Grammar, and Parser dirs) type-bug An unexpected behavior, bug, or error
#117852 opened Apr 13, 2024 by graingert
SystemExit raised in signal handler not propagated to running threads, killing them instead 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes type-bug An unexpected behavior, bug, or error
#107170 opened Jul 24, 2023 by sandrinr
DoS Vulnerability in socket.create_connection through malicious DNS responses 3.8 (EOL) end of life 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes 3.13 bugs and security fixes stdlib Python modules in the Lib dir type-security A security issue
#106283 opened Jun 30, 2023 by NyanKiyoshi
non-readline PyOS_StdioReadline when used with PyOS_InputHook fails is buggy with long input 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes type-bug An unexpected behavior, bug, or error
#103929 opened Apr 27, 2023 by tacaswell
ntpath.realpath() mishandles filenames that resemble drives 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes OS-windows type-bug An unexpected behavior, bug, or error
#102475 opened Mar 6, 2023 by barneygale
Disallow calling PyThreadState_Delete* at runtime shutdown 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes interpreter-core (Objects, Python, Grammar, and Parser dirs) type-crash A hard crash of the interpreter, possibly with a core dump
#102233 opened Feb 25, 2023 by kumaraditya303
ProcessPoolExecutor should not share one BrokenProcessPool exception among all futures 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes stdlib Python modules in the Lib dir topic-multiprocessing type-bug An unexpected behavior, bug, or error
#101267 opened Jan 23, 2023 by daniel-shields
os.path.normpath of relative path r".\C:\x" returns absolute path r"C:\x" on Windows, similar in pathlib 3.7 (EOL) end of life 3.8 (EOL) end of life 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes OS-windows stdlib Python modules in the Lib dir type-bug An unexpected behavior, bug, or error type-security A security issue
#100162 opened Dec 10, 2022 by gpshead
Add audit events for thread creation/close 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes extension-modules C modules in the Modules dir
#99377 opened Nov 11, 2022 by zooba
Resource tracker fails to track filenames with colons on Linux 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes topic-multiprocessing type-bug An unexpected behavior, bug, or error
#98896 opened Oct 31, 2022 by maaleske
realpath has a race condition which might cause it to throw spurious exceptions 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes extension-modules C modules in the Modules dir type-bug An unexpected behavior, bug, or error
#97566 opened Sep 26, 2022 by bitonic
macOS linker warnings in macOS ventura 3.9 only security fixes 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes 3.13 bugs and security fixes OS-mac
#97524 opened Sep 24, 2022 by pablogsal
Reduce user friction: Improve docs on how to work around our integer to/from decimal str length limit 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes docs Documentation in the Doc dir
#96722 opened Sep 9, 2022 by gpshead
Callbacks pended by Py_AddPendingCall will never be invoked if the main thread doesn't release GIL 3.10 only security fixes 3.11 only security fixes 3.12 only security fixes interpreter-core (Objects, Python, Grammar, and Parser dirs) type-bug An unexpected behavior, bug, or error
#95820 opened Aug 9, 2022 by JiayiFeng
ProTip! Type g p on any issue or pull request to go back to the pull request listing page.