Skip to content

[3.11] gh-145599, CVE 2026-3644: Reject control characters in http.cookies.Morsel.update() (GH-145600)#146026

Open
miss-islington wants to merge 2 commits intopython:3.11from
miss-islington:backport-57e88c1-3.11
Open

[3.11] gh-145599, CVE 2026-3644: Reject control characters in http.cookies.Morsel.update() (GH-145600)#146026
miss-islington wants to merge 2 commits intopython:3.11from
miss-islington:backport-57e88c1-3.11

Commits

Commits on Mar 16, 2026