Skip to content

[3.11] gh-145599, CVE 2026-3644: Reject control characters in http.cookies.Morsel.update() (GH-145600)#146026

Merged
pablogsal merged 2 commits into
python:3.11from
miss-islington:backport-57e88c1-3.11
Jun 28, 2026
Merged

[3.11] gh-145599, CVE 2026-3644: Reject control characters in http.cookies.Morsel.update() (GH-145600)#146026
pablogsal merged 2 commits into
python:3.11from
miss-islington:backport-57e88c1-3.11