Issues

`compression.zstd.open()` names the wrong mode in its invalid mode error

python/cpython#161730 · opened

on Nov 10, 2026

test_xxlimited is skipped on Windows in debug mode

python/cpython#161724 · opened

on Nov 10, 2026

import too greedy, make it lazy

python/cpython#161721 · opened

on Nov 10, 2026

Clarify __lazy_import__ docstring in bltinmodule.c

python/cpython#161715 · opened

on Nov 9, 2026

Free-threading race betwen two Py_SETREF

python/cpython#161714 · opened

on Nov 9, 2026

2

Thread.join(timeout) can block forever: ThreadHandle_join reads the clock twice through Py_MAX (3.13, 3.14)

python/cpython#161712 · opened

on Nov 9, 2026

Document __lazy_import__

python/cpython#161708 · opened

on Nov 9, 2026

1

Cookie Attribute Injection via Unescaped Semicolons in http.cookies.Morsel.OutputString()

python/cpython#161707 · opened

on Nov 9, 2026

1

[security] Prevent shadowing stdlib in gzip/tarfile/zipfile CLI [CVE-2026-115791]

python/cpython#161705 · opened

on Nov 9, 2026

[C API] Add `PyTupleWriter` API

python/cpython#161694 · opened

on Nov 9, 2026

1

dict.setdefault() segfaults on an instance dict with an absent shared key passed as a str subclass

python/cpython#161693 · opened

on Nov 9, 2026

functools.partial: changing p.keywords during the call's keyword merge overflows a stack buffer

python/cpython#161692 · opened

on Nov 9, 2026

memoryview: a view released by buffer or index in the middle of == or item assignment is still used

python/cpython#161691 · opened

on Nov 9, 2026

dict.fromkeys() GC-tracks a non-GC object returned by a subclass constructor (3.15 regression)

python/cpython#161690 · opened

on Nov 9, 2026

2

ElementTree slice assignment with start greater than stop duplicates a child without owning its second reference

python/cpython#161689 · opened

on Nov 9, 2026

bytearray.strip() reads freed memory if the argument's __release_buffer__ resizes the bytearray

python/cpython#161688 · opened

on Nov 9, 2026

email: non-ASCII whitespace after a space is lost from address display names

python/cpython#161678 · opened

on Nov 9, 2026

Reduce perf trampoline overhead

python/cpython#161676 · opened

on Nov 9, 2026

http.server: HTTP/1.1 requests without Host, with two Host fields or with an invalid Host value are accepted

python/cpython#161675 · opened

on Nov 9, 2026

multiprocessing: on Windows, a message over 4,294,967,247 bytes raises OSError and breaks a waiting receiver

python/cpython#161668 · opened

on Nov 9, 2026

2

frameobject: undefined 32-bit left shifts in `stack_swap()`

python/cpython#161666 · opened

on Nov 9, 2026

_socket: `socket.sethostname()` reports a failed buffer export as an OS error, raising `SystemError`

python/cpython#161665 · opened

on Nov 9, 2026

json.dumps: single circle markers hash lookup

python/cpython#161661 · opened

on Nov 9, 2026

2

Enable `test_json` to pass with `PYTHON_LAZY_IMPORTS=all`

python/cpython#161660 · opened

on Nov 9, 2026

AF_VSOCK sockets reject buffered SOL_SOCKET options

python/cpython#161657 · opened

on Nov 9, 2026

Navigation Menu

Repository navigation

Issues

`compression.zstd.open()` names the wrong mode in its invalid mode error

test_xxlimited is skipped on Windows in debug mode

import too greedy, make it lazy

Clarify __lazy_import__ docstring in bltinmodule.c

Free-threading race betwen two Py_SETREF

Thread.join(timeout) can block forever: ThreadHandle_join reads the clock twice through Py_MAX (3.13, 3.14)

Document __lazy_import__

Cookie Attribute Injection via Unescaped Semicolons in http.cookies.Morsel.OutputString()

[security] Prevent shadowing stdlib in gzip/tarfile/zipfile CLI [CVE-2026-115791]

[C API] Add `PyTupleWriter` API

dict.setdefault() segfaults on an instance dict with an absent shared key passed as a str subclass

functools.partial: changing p.keywords during the call's keyword merge overflows a stack buffer

memoryview: a view released by buffer or index in the middle of == or item assignment is still used

dict.fromkeys() GC-tracks a non-GC object returned by a subclass constructor (3.15 regression)

ElementTree slice assignment with start greater than stop duplicates a child without owning its second reference

bytearray.strip() reads freed memory if the argument's __release_buffer__ resizes the bytearray

email: non-ASCII whitespace after a space is lost from address display names

Reduce perf trampoline overhead

http.server: HTTP/1.1 requests without Host, with two Host fields or with an invalid Host value are accepted

multiprocessing: on Windows, a message over 4,294,967,247 bytes raises OSError and breaks a waiting receiver

frameobject: undefined 32-bit left shifts in `stack_swap()`

_socket: `socket.sethostname()` reports a failed buffer export as an OS error, raising `SystemError`

json.dumps: single circle markers hash lookup

Enable `test_json` to pass with `PYTHON_LAZY_IMPORTS=all`

AF_VSOCK sockets reject buffered SOL_SOCKET options