Reject control characters in http.cookies.Morsel #143919

Activity

1. sethmlarson

   added

   type-securityA security issueA security issue

   on Jan 16, 2026
2. sethmlarson

   added a commit that references this issue on Jan 16, 2026

   pythongh-143919: Reject control characters in http.cookies.Morsel

   fdbf0c4
3. StanFromIreland

   added

   stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory

   on Jan 16, 2026
4. sethmlarson

   added a commit that references this issue on Jan 20, 2026

   gh-143919: Reject control characters in http cookies

   ...

   95746b3
5. miss-islington

   added 4 commits that reference this issue on Jan 20, 2026

   pythongh-143919: Reject control characters in http cookies

   ...

   2bb0ca8

   pythongh-143919: Reject control characters in http cookies

   ...

   19ca21e

   pythongh-143919: Reject control characters in http cookies

   ...

   9729bdf

   pythongh-143919: Reject control characters in http cookies

   ...

   c2d345e
6. sethmlarson

   added a commit that references this issue on Jan 20, 2026

   [3.10] pythongh-143919: Reject control characters in http cookies

   ...

   57c5ecd
7. hugovk

   added a commit that references this issue on Jan 23, 2026

   [3.14] gh-143919: Reject control characters in http cookies (#144089)

   ...

   712452e
8. pablogsal

   added 4 commits that reference this issue on Jan 25, 2026

   [3.10] gh-143919: Reject control characters in http cookies (#144094)

   ...

   7852d72

   [3.13] gh-143919: Reject control characters in http cookies (#144090)

   ...

   918387e

   [3.11] gh-143919: Reject control characters in http cookies (#144092)

   ...

   b1869ff

   [3.12] gh-143919: Reject control characters in http cookies (#144091)

   ...

   6270010
9. StanFromIreland

   closed this as completedon Jan 30, 2026
10. bashonly

    added 2 commits that reference this issue on Feb 6, 2026

    [cookies] Ignore cookies with control characters

    ...

    528af10

    [cookies] Ignore cookies with control characters

    ...

    8594650
11. bmwiedemann

    added a commit that references this issue on Feb 13, 2026

    Update python310 to version 3.10.19 / rev 71 via SR 1332783

    ...

    5585b8b
12. thunder-coding

    added a commit that references this issue on Feb 15, 2026

    pythongh-143919: Reject control characters in http cookies

    ...

    e0c092e
13. bashonly

    added a commit that references this issue on Feb 16, 2026

    [cookies] Ignore cookies with control characters (#15862)

    ...

    43229d1
14. bmwiedemann

    added 2 commits that reference this issue on Feb 18, 2026

    Update python312 to version 3.12.12 / rev 43 via SR 1332782

    ...

    82a6b4d

    Update python311 to version 3.11.14 / rev 63 via SR 1332828

    ...

    586ca21
15. POWERFULMOVES

    added 2 commits that reference this issue on Mar 12, 2026

    [cookies] Ignore cookies with control characters (yt-dlp#15862)

    ...

    2d58f53

    feat(pmoves-yt): make submodule authoritative runtime (#4)

    ...

    d0be5fd
16. aalsuwaidi

    added a commit that references this issue on Aug 21, 2026

    Merge upstream master (yt-dlp/yt-dlp) into fork (#1)

    ...

    31ab03e
17. mcepl

    added 2 commits that reference this issue on Sep 18, 2026

    [CVE-2026-0672] reject control characters in http cookies

    ...

    9224f3d

    [CVE-2026-0672] reject control characters in http cookies

    ...

    829e6df
18. mcepl

    added 2 commits that reference this issue on Oct 1, 2026

    [CVE-2026-0672] reject control characters in http cookies

    ...

    d00fee7

    [CVE-2026-0672] reject control characters in http cookies

    ...

    4edecec