René's URL Explorer Experiment


Title: `pyexpat.c`: Unbounded C recursion in `conv_content_model` causes crash (CVE 2026-4224) · Issue #145986 · python/cpython · GitHub

Open Graph Title: `pyexpat.c`: Unbounded C recursion in `conv_content_model` causes crash (CVE 2026-4224) · Issue #145986 · python/cpython

X Title: `pyexpat.c`: Unbounded C recursion in `conv_content_model` causes crash (CVE 2026-4224) · Issue #145986 · python/cpython

Description: Crash report What happened? Please see PR for more information. CPython versions tested on: 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, CPython main branch Operating systems tested on: Linux Output from running 'python -VV' on the command line: ...

Open Graph Description: Crash report What happened? Please see PR for more information. CPython versions tested on: 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, CPython main branch Operating systems tested on: Linux Output from ru...

X Description: Crash report What happened? Please see PR for more information. CPython versions tested on: 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, CPython main branch Operating systems tested on: Linux Output from ru...

Opengraph URL: https://github.com/python/cpython/issues/145986

X: @github

direct link

Domain: github.com

Hey, it has json ld scripts: 
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"`pyexpat.c`: Unbounded C recursion in `conv_content_model` causes crash (CVE 2026-4224)","articleBody":"# Crash report\n\n### What happened?\n\nPlease see PR for more information.\n\n\n### CPython versions tested on:\n\n3.10, 3.11, 3.12, 3.13, 3.14, 3.15, CPython main branch\n\n### Operating systems tested on:\n\nLinux\n\n### Output from running 'python -VV' on the command line:\n\n_No response_\n\n\u003c!-- gh-linked-prs -->\n### Linked PRs\n* gh-145987\n* gh-145995\n* gh-145996\n* gh-145999\n* gh-146000\n* gh-146002\n\u003c!-- /gh-linked-prs -->\n","author":{"url":"https://github.com/StanFromIreland","@type":"Person","name":"StanFromIreland"},"datePublished":"2026-03-15T19:35:15Z","url":"https://github.com/python/cpython/issues/145986"}
react-profiling0
react-import-mapreact,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf
route-pattern/_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format)
route-controllervoltron_issues_fragments
route-actionissue_layout
fetch-noncev2:26d2a16e-9bd0-65d7-bf3a-af0ed2e60188
current-catalog-service-hash81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114
request-idDD72:2BF562:256DE1:340879:6AECB561
html-safe-noncefad5ffcff839b9571fdf60064bf5de43f7d1fe23f14bb3745ff17fa304b7dcc4
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJERDcyOjJCRjU2MjoyNTZERTE6MzQwODc5OjZBRUNCNTYxIiwidmlzaXRvcl9pZCI6IjQ3MjkyNjc4ODgxODQ5MzE2ODEiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmacf697a5227229d43c28a3eb2af885f84da1171eedb3635a60454ee212efb14dee
hovercard-subject-tagissue:4079043663
github-keyboard-shortcutsrepository,issues,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/issues_fragments/issue_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/python/cpython/145986/issue_layout
twitter:imagehttps://opengraph.githubassets.com/729bfa1bc1c28eaf5547901bda0be3727613b7a63b71e368a84be2438058136d/python/cpython/issues/145986
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/729bfa1bc1c28eaf5547901bda0be3727613b7a63b71e368a84be2438058136d/python/cpython/issues/145986
og:image:altCrash report What happened? Please see PR for more information. CPython versions tested on: 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, CPython main branch Operating systems tested on: Linux Output from ru...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameStanFromIreland
hostnamegithub.com
expected-hostnamegithub.com
None95ae5445dec4cded2bc4f9d97ede92b9116c0bf381a08a5c844b60b5bddcbc97
turbo-cache-controlno-preview
go-importgithub.com/python/cpython git https://github.com/python/cpython.git
octolytics-dimension-user_id1525981
octolytics-dimension-user_loginpython
octolytics-dimension-repository_id81598961
octolytics-dimension-repository_nwopython/cpython
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id81598961
octolytics-dimension-repository_network_root_nwopython/cpython
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
releasedb4ef601a7f034ae2a68e17d6eeaeb7ee9470192
ui-targetfull
theme-color#1e2327
color-schemelight dark
react-app-nameissues

Links:

Skip to contenthttps://github.com/python/cpython/issues/145986#start-of-content
https://github.com/
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fissues%2F145986
GitHubRepository hosting, code review, and collaborationhttps://github.com/platform
CopilotAI coding agent for tasks, projects, and automated workhttps://github.com/features/copilot
ActionsCI/CD and automationhttps://github.com/features/actions
Code QualityQuality analysis, fixes, and enforcementhttps://github.com/features/code-quality
CodespacesCloud development environmentshttps://github.com/features/codespaces
Code SecurityVulnerability detection and remediationhttps://github.com/security/advanced-security/code-security
Secret ProtectionSecret scanning and leak preventionhttps://github.com/security/advanced-security/secret-protection
All Featureshttps://github.com/features
Documentationhttps://docs.github.com/en
Traininghttps://learn.github.com/skills
Certificationshttps://learn.github.com/credentials
Build with Copilothttps://github.com/features/ai
Customize Copilothttps://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview
Integrationshttps://github.com/marketplace
Trending reposhttps://github.com/trending
GitHub Sponsorshttps://github.com/open-source/sponsors
Developer articleshttps://github.com/resources/articles
ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place.https://github.blog/changelog/
Enterpriseshttps://github.com/enterprise
Teamhttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
See all industrieshttps://github.com/solutions/industry
Why GitHubhttps://github.com/why-github
Customer Storieshttps://github.com/customer-stories
Business insightshttps://github.com/solutions/executive-insights
Trust Centerhttps://github.com/trust-center
GitHub Advanced SecurityEnterprise-grade code securityhttps://github.com/security/advanced-security
Copilot for businessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Documentationhttps://docs.github.com/en
Resource centerhttps://github.com/resources
Bloghttps://github.blog/
Events & webinarshttps://github.com/resources/events
Community Forumhttps://github.com/orgs/community/discussions
Customer Storieshttps://github.com/customer-stories
Integrationshttps://github.com/marketplace
Customer supporthttps://help.github.com/
Traininghttps://learn.github.com/skills
GitHub Statushttps://www.githubstatus.com/
Abouthttps://github.com/about
Partnershttps://github.com/partners
Changeloghttps://github.blog/changelog/
GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub.https://githubuniverse.com/
Pricinghttps://github.com/pricing
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fissues%2F145986
Sign uphttps://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fissues_fragments%2Fissue_layout&source=header-repo&source_repo=python%2Fcpython
Reloadhttps://github.com/python/cpython/issues/145986
Reloadhttps://github.com/python/cpython/issues/145986
Reloadhttps://github.com/python/cpython/issues/145986
pythonhttps://github.com/python
cpythonhttps://github.com/python/cpython
Codehttps://github.com/python/cpython
Issues5k+ (5k+)https://github.com/python/cpython/issues
Pull requests2.3k (2.3k)https://github.com/python/cpython/pulls
Actionshttps://github.com/python/cpython/actions
Projectshttps://github.com/python/cpython/projects
Security and qualityhttps://github.com/python/cpython/security
Insightshttps://github.com/python/cpython/pulse
https://github.com/python/cpython
New issuehttps://github.com/login?return_to=https://github.com/python/cpython/issues/145986
New issuehttps://github.com/login?return_to=https://github.com/python/cpython/issues/145986
pyexpat.c: Unbounded C recursion in conv_content_model causes crash (CVE 2026-4224)https://github.com/python/cpython/issues/145986#top
https://github.com/StanFromIreland
3.12only security fixeshttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%223.12%22
extension-modulesC modules in the Modules dirhttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22extension-modules%22
topic-XMLhttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22topic-XML%22
type-crashA hard crash of the interpreter, possibly with a core dumphttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22type-crash%22
type-securityA security issuehttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22type-security%22
https://github.com/StanFromIreland
StanFromIrelandhttps://github.com/StanFromIreland
on Mar 15, 2026https://github.com/python/cpython/issues/145986#issue-4079043663
gh-145986: Avoid unbound C recursion in conv_content_model in pyexpat.c (CVE 2026-4224) #145987https://github.com/python/cpython/pull/145987
[3.14] gh-145986: Avoid unbound C recursion in conv_content_model in pyexpat.c (CVE 2026-4224) (GH-145987) #145995https://github.com/python/cpython/pull/145995
[3.13] gh-145986: Avoid unbound C recursion in conv_content_model in pyexpat.c (CVE 2026-4224) (GH-145987) #145996https://github.com/python/cpython/pull/145996
[3.12] gh-145986: Avoid unbound C recursion in conv_content_model in pyexpat.c (CVE 2026-4224) (GH-145987) #145999https://github.com/python/cpython/pull/145999
[3.11] gh-145986: Avoid unbound C recursion in conv_content_model in pyexpat.c (CVE 2026-4224) (GH-145987) #146000https://github.com/python/cpython/pull/146000
[3.10] gh-145986: Avoid unbound C recursion in conv_content_model in pyexpat.c (CVE 2026-4224) (GH-145987) #146002https://github.com/python/cpython/pull/146002
Nexthttps://github.com/python/cpython/issues/145986?timeline_page=1
StanFromIrelandhttps://github.com/StanFromIreland
on Mar 15, 2026https://github.com/python/cpython/issues/145986#event-23587738358
StanFromIrelandhttps://github.com/StanFromIreland
type-securityA security issuehttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22type-security%22
extension-modulesC modules in the Modules dirhttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22extension-modules%22
topic-XMLhttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22topic-XML%22
3.11only security fixeshttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%223.11%22
3.10 (EOL)end of lifehttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%223.10%20(EOL)%22
type-crashA hard crash of the interpreter, possibly with a core dumphttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22type-crash%22
3.12only security fixeshttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%223.12%22
3.13only security fixeshttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%223.13%22
3.14bugs and security fixeshttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%223.14%22
3.15bugs and security fixeshttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%223.15%22
on Mar 15, 2026https://github.com/python/cpython/issues/145986#event-23587738494
picnixzhttps://github.com/picnixz
on Mar 15, 2026https://github.com/python/cpython/issues/145986#event-23587865041
picnixzhttps://github.com/picnixz
on Mar 15, 2026https://github.com/python/cpython/issues/145986#event-23588827113
gh-145986: Avoid unbound C recursion in `conv_content_model` in `pyex…https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768
gh-145986https://github.com/python/cpython/issues/145986
eb0e8behttps://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768
miss-islingtonhttps://github.com/miss-islington
on Mar 15, 2026https://github.com/python/cpython/issues/145986#event-23588830170
pythongh-145986: Avoid unbound C recursion in `conv_content_model` in…https://github.com/miss-islington/cpython/commit/aa98922b108265ae67e18cea85174f1fd2af51aa
pythongh-145986https://github.com/python/cpython/issues/145986
aa98922https://github.com/miss-islington/cpython/commit/aa98922b108265ae67e18cea85174f1fd2af51aa
pythongh-145986: Avoid unbound C recursion in `conv_content_model` in…https://github.com/miss-islington/cpython/commit/1822fc7b168882a72d5af21443c5c9f25c8bd246
pythongh-145986https://github.com/python/cpython/issues/145986
1822fc7https://github.com/miss-islington/cpython/commit/1822fc7b168882a72d5af21443c5c9f25c8bd246
freebsd-githttps://github.com/freebsd-git
on Apr 12, 2026https://github.com/python/cpython/issues/145986#event-24423892109
lang/python314: Security update to 3.14.4https://github.com/freebsd/freebsd-ports/commit/955268b87942c8ed7787c1cce516bf8bf8ff1041
955268bhttps://github.com/freebsd/freebsd-ports/commit/955268b87942c8ed7787c1cce516bf8bf8ff1041
lang/python314: Security update to 3.14.4https://github.com/freebsd/freebsd-ports/commit/cb35b3df20c2be6293b0e5aaed2fd9933fa75713
cb35b3dhttps://github.com/freebsd/freebsd-ports/commit/cb35b3df20c2be6293b0e5aaed2fd9933fa75713
ljfphttps://github.com/ljfp
on Apr 25, 2026https://github.com/python/cpython/issues/145986#event-24868327345
pythongh-145986: Avoid unbound C recursion in `conv_content_model` in…https://github.com/ljfp/cpython/commit/606d5cf2595fa4457d16e3efd3970aafef6b94c7
pythongh-145986https://github.com/python/cpython/issues/145986
606d5cfhttps://github.com/ljfp/cpython/commit/606d5cf2595fa4457d16e3efd3970aafef6b94c7
camachathttps://github.com/camachat
on Jul 22, 2026https://github.com/python/cpython/issues/145986#event-28352938918
lang/python314: Security update to 3.14.4https://github.com/camachat/freebsd-ports/commit/7b1d556a0ba7184522f6d8cb82d70d607bbe3d53
7b1d556https://github.com/camachat/freebsd-ports/commit/7b1d556a0ba7184522f6d8cb82d70d607bbe3d53
lang/python314: Security update to 3.14.4https://github.com/camachat/freebsd-ports/commit/ec484f0952e5983c0b18962c70347225a5261f47
ec484f0https://github.com/camachat/freebsd-ports/commit/ec484f0952e5983c0b18962c70347225a5261f47
Yhg1shttps://github.com/Yhg1s
on Aug 4, 2026https://github.com/python/cpython/issues/145986#event-28938682276
[3.12] gh-145986: Avoid unbound C recursion in `conv_content_model` i…https://github.com/python/cpython/commit/24ce88b285f56ee11626cf5e472af3cd8cc7c621
gh-145986https://github.com/python/cpython/issues/145986
24ce88bhttps://github.com/python/cpython/commit/24ce88b285f56ee11626cf5e472af3cd8cc7c621
StanFromIrelandhttps://github.com/StanFromIreland
completedhttps://github.com/python/cpython/issues?q=is%3Aissue%20state%3Aclosed%20archived%3Afalse%20reason%3Acompleted
on Aug 4, 2026https://github.com/python/cpython/issues/145986#event-28939978538
arnouthttps://github.com/arnout
on Aug 14, 2026https://github.com/python/cpython/issues/145986#event-29459784121
package/python3: security bump to v3.12.14https://github.com/buildroot/buildroot/commit/80251a06cf88d47385afd74e5e25f68f93bccca7
80251a0https://github.com/buildroot/buildroot/commit/80251a06cf88d47385afd74e5e25f68f93bccca7
mceplhttps://github.com/mcepl
on Sep 18, 2026https://github.com/python/cpython/issues/145986#event-31360599769
[CVE-2026-4224] avoid unbound C recursion in `conv_content_model` in …https://github.com/openSUSE-Python/cpython/commit/bb4749db9e1a386a30ee8afa09393f708d552a3d
CVE-2026-4224https://github.com/advisories/GHSA-h46w-ffvp-4pw5
bb4749dhttps://github.com/openSUSE-Python/cpython/commit/bb4749db9e1a386a30ee8afa09393f708d552a3d
[CVE-2026-4224] avoid unbound C recursion in `conv_content_model` in …https://github.com/openSUSE-Python/cpython/commit/5875e281f6097136f353a8a56878b040c82efe29
CVE-2026-4224https://github.com/advisories/GHSA-h46w-ffvp-4pw5
5875e28https://github.com/openSUSE-Python/cpython/commit/5875e281f6097136f353a8a56878b040c82efe29
[CVE-2026-4224] avoid unbound C recursion in `conv_content_model` in …https://github.com/openSUSE-Python/cpython/commit/456f2628815fa38ba256256d92af9a3bb904bae3
CVE-2026-4224https://github.com/advisories/GHSA-h46w-ffvp-4pw5
456f262https://github.com/openSUSE-Python/cpython/commit/456f2628815fa38ba256256d92af9a3bb904bae3
mceplhttps://github.com/mcepl
on Oct 1, 2026https://github.com/python/cpython/issues/145986#event-32286009756
[CVE-2026-4224] avoid unbound C recursion in `conv_content_model` in …https://github.com/openSUSE-Python/cpython/commit/869f263e7114b7ad2dc3a427faea904d210bdc1a
CVE-2026-4224https://github.com/advisories/GHSA-h46w-ffvp-4pw5
869f263https://github.com/openSUSE-Python/cpython/commit/869f263e7114b7ad2dc3a427faea904d210bdc1a
[CVE-2026-4224] avoid unbound C recursion in `conv_content_model` in …https://github.com/openSUSE-Python/cpython/commit/43e03c2fbd6d2e049030dde23681b5a5e25abd3a
CVE-2026-4224https://github.com/advisories/GHSA-h46w-ffvp-4pw5
43e03c2https://github.com/openSUSE-Python/cpython/commit/43e03c2fbd6d2e049030dde23681b5a5e25abd3a
[CVE-2026-4224] avoid unbound C recursion in `conv_content_model` in …https://github.com/openSUSE-Python/cpython/commit/ef0aa192a23d2710da342a8619e97b666ad3c89b
CVE-2026-4224https://github.com/advisories/GHSA-h46w-ffvp-4pw5
ef0aa19https://github.com/openSUSE-Python/cpython/commit/ef0aa192a23d2710da342a8619e97b666ad3c89b
icanhasmathhttps://github.com/icanhasmath
on Oct 28, 2026https://github.com/python/cpython/issues/145986#event-34496616861
[3.10] pythongh-145986: Avoid unbound C recursion in `conv_content_mo…https://github.com/ActiveState/cpython/commit/446494ffaa16324436e558024bdcea3ef725dd63
pythongh-145986https://github.com/python/cpython/issues/145986
446494fhttps://github.com/ActiveState/cpython/commit/446494ffaa16324436e558024bdcea3ef725dd63
Sign up for freehttps://github.com/signup?return_to=https://github.com/python/cpython/issues/145986
Sign in to commenthttps://github.com/login?return_to=https://github.com/python/cpython/issues/145986
StanFromIrelandhttps://github.com/StanFromIreland
3.12only security fixeshttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%223.12%22
extension-modulesC modules in the Modules dirhttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22extension-modules%22
topic-XMLhttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22topic-XML%22
type-crashA hard crash of the interpreter, possibly with a core dumphttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22type-crash%22
type-securityA security issuehttps://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22type-security%22
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.