| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:fa6bc458-872a-e2ee-9bb4-7d5f40c31c61 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | D24A:3467D9:C9949A:114D5EB:6A55C025 |
| html-safe-nonce | 2c254e37dc32c41b194552e05d8e1589ea3c8b24ab44564accb59b4d5ac2c532 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJEMjRBOjM0NjdEOTpDOTk0OUE6MTE0RDVFQjo2QTU1QzAyNSIsInZpc2l0b3JfaWQiOiIzOTIyNjAwNTM1MjMzMjQ5MzE3IiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0= |
| visitor-hmac | 0b5eb7f9dd74ca3344838f8e46750352de40811fcd5b5316bc624fe53efe6174 |
| hovercard-subject-tag | pull_request:2849385173 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///voltron/pull_requests_fragments/pull_request_layout |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/python/cpython/139234/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/c9041c3bf4c4fe2a564a9b9de3ff8a9a779050bddf25597daa9c6a0eef2f1108/python/cpython/pull/139234 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/c9041c3bf4c4fe2a564a9b9de3ff8a9a779050bddf25597daa9c6a0eef2f1108/python/cpython/pull/139234 |
| og:image:alt | @hartwork I observed that the maximum allocation factor is only checked if we exceed the activation threshold. The online docs for Expat didn't explicitly mention it so I mentioned it in our do... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | picnixz |
| hostname | github.com |
| expected-hostname | github.com |
| None | b5665c84831ed9ac4fb79519c16c9c5580ba8092fb8bb6e3e72972ec7197348e |
| turbo-cache-control | no-cache |
| go-import | github.com/python/cpython git https://github.com/python/cpython.git |
| octolytics-dimension-user_id | 1525981 |
| octolytics-dimension-user_login | python |
| octolytics-dimension-repository_id | 81598961 |
| octolytics-dimension-repository_nwo | python/cpython |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 81598961 |
| octolytics-dimension-repository_network_root_nwo | python/cpython |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 8f8e1726192df8dce16872ceb503336c12e9ae78 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/python/cpython/pull/139234#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F139234 |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/open-source/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/open-source/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F139234 |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=python%2Fcpython |
| Reload | https://github.com/python/cpython/pull/139234 |
| Reload | https://github.com/python/cpython/pull/139234 |
| Reload | https://github.com/python/cpython/pull/139234 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
|
python
| https://github.com/python |
| cpython | https://github.com/python/cpython |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
|
Notifications
| https://github.com/login?return_to=%2Fpython%2Fcpython |
|
Fork
35k
| https://github.com/login?return_to=%2Fpython%2Fcpython |
|
Star
73.8k
| https://github.com/login?return_to=%2Fpython%2Fcpython |
|
Code
| https://github.com/python/cpython |
|
Issues
5k+
| https://github.com/python/cpython/issues |
|
Pull requests
2.3k
| https://github.com/python/cpython/pulls |
|
Actions
| https://github.com/python/cpython/actions |
|
Projects
| https://github.com/python/cpython/projects |
|
Security and quality
0
| https://github.com/python/cpython/security |
|
Insights
| https://github.com/python/cpython/pulse |
|
Code
| https://github.com/python/cpython |
|
Issues
| https://github.com/python/cpython/issues |
|
Pull requests
| https://github.com/python/cpython/pulls |
|
Actions
| https://github.com/python/cpython/actions |
|
Projects
| https://github.com/python/cpython/projects |
|
Security and quality
| https://github.com/python/cpython/security |
|
Insights
| https://github.com/python/cpython/pulse |
| picnixz | https://github.com/picnixz |
| python:main | https://github.com/python/cpython/tree/main |
| picnixz:feat/xml/mitigation-api-90949 | https://github.com/picnixz/cpython/tree/feat/xml/mitigation-api-90949 |
| Conversation | https://github.com/python/cpython/pull/139234 |
| Commits33 (33) | https://github.com/python/cpython/pull/139234/commits |
| Checks | https://github.com/python/cpython/pull/139234/checks |
| Files changed | https://github.com/python/cpython/pull/139234/files |
| gh-90949: add Expat API to prevent XML deadly allocations | https://github.com/python/cpython/pull/139234#top |
| picnixz | https://github.com/picnixz |
| python:main | https://github.com/python/cpython/tree/main |
| picnixz:feat/xml/mitigation-api-90949 | https://github.com/picnixz/cpython/tree/feat/xml/mitigation-api-90949 |
|
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| Sep 22, 2025 | https://github.com/python/cpython/pull/139234#issue-3440840532 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| @hartwork | https://github.com/hartwork |
| Expose Expat XML attack protection APIs #90949 | https://github.com/python/cpython/issues/90949 |
| https://cpython-previews--139234.org.readthedocs.build/ | https://cpython-previews--139234.org.readthedocs.build/ |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| picnixz | https://github.com/picnixz |
| September 22, 2025 14:51 | https://github.com/python/cpython/pull/139234#commits-pushed-c1c23fb |
|
| https://github.com/picnixz |
| Expose XML Expat 2.7.2 mitigation APIs | https://github.com/python/cpython/pull/139234/commits/c1c23fbf29411a1c52b326874a95df1b8da65d64 |
| c1c23fb | https://github.com/python/cpython/pull/139234/commits/c1c23fbf29411a1c52b326874a95df1b8da65d64 |
|
| https://github.com/picnixz |
| add tests | https://github.com/python/cpython/pull/139234/commits/12bef9ceac44b3b70ef41bf97f389d0d8291721e |
| 12bef9c | https://github.com/python/cpython/pull/139234/commits/12bef9ceac44b3b70ef41bf97f389d0d8291721e |
|
| https://github.com/picnixz |
| docs | https://github.com/python/cpython/pull/139234/commits/1d7e599f4006603817c3242ecf786ae5a0b7b6df |
| 1d7e599 | https://github.com/python/cpython/pull/139234/commits/1d7e599f4006603817c3242ecf786ae5a0b7b6df |
|
| https://github.com/picnixz |
| NEWS | https://github.com/python/cpython/pull/139234/commits/3dcd9bd3228dad609ae6395d2175d0f83fe1facd |
| 3dcd9bd | https://github.com/python/cpython/pull/139234/commits/3dcd9bd3228dad609ae6395d2175d0f83fe1facd |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| AA-Turner | https://github.com/AA-Turner |
| code owner | https://github.com/python/cpython/blob/72d5ee051145c5aaf3cc6b8e807a3a2b8930ae63/.github/CODEOWNERS#L110 |
| September 22, 2025 12:53 | https://github.com/python/cpython/pull/139234#event-19837899269 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
|
topic-XML
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3Atopic-XML |
| Sep 22, 2025 | https://github.com/python/cpython/pull/139234#event-19837899350 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
awaiting core review
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22awaiting%20core%20review%22 |
| Sep 22, 2025 | https://github.com/python/cpython/pull/139234#event-19837901477 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
Sep 22, 2025
| https://github.com/python/cpython/pull/139234#ref-issue-1199075598 |
|
Expose Expat XML attack protection APIs
#90949
| https://github.com/python/cpython/issues/90949 |
| picnixz | https://github.com/picnixz |
| September 22, 2025 17:04 | https://github.com/python/cpython/pull/139234#commits-pushed-192fe08 |
|
| https://github.com/picnixz |
| Merge branch 'main' into feat/xml/mitigation-api-90949 | https://github.com/python/cpython/pull/139234/commits/192fe082ad78a53014fd8c81b41d2517c7835a52 |
| 192fe08 | https://github.com/python/cpython/pull/139234/commits/192fe082ad78a53014fd8c81b41d2517c7835a52 |
|
| https://github.com/picnixz |
| fix docs | https://github.com/python/cpython/pull/139234/commits/0ecbd5526c42cfa87d0f130df39ec531e59a2d6f |
| 0ecbd55 | https://github.com/python/cpython/pull/139234/commits/0ecbd5526c42cfa87d0f130df39ec531e59a2d6f |
|
| https://github.com/picnixz |
| fix tests | https://github.com/python/cpython/pull/139234/commits/07445ad2726123991e64eb63951ae35400601ea6 |
| 07445ad | https://github.com/python/cpython/pull/139234/commits/07445ad2726123991e64eb63951ae35400601ea6 |
|
| https://github.com/picnixz |
| regen SBOM | https://github.com/python/cpython/pull/139234/commits/9c7371f416eaf70f7eaa2c73d8792c1dca8d5cc4 |
| 9c7371f | https://github.com/python/cpython/pull/139234/commits/9c7371f416eaf70f7eaa2c73d8792c1dca8d5cc4 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| force-pushed | https://github.com/python/cpython/compare/3fa5b1086fc0e8e499b736e759ecba8747a5c6a9..9c7371f416eaf70f7eaa2c73d8792c1dca8d5cc4 |
| 3fa5b10 | https://github.com/python/cpython/commit/3fa5b1086fc0e8e499b736e759ecba8747a5c6a9 |
| 9c7371f | https://github.com/python/cpython/commit/9c7371f416eaf70f7eaa2c73d8792c1dca8d5cc4 |
|
Compare
| https://github.com/python/cpython/compare/3fa5b1086fc0e8e499b736e759ecba8747a5c6a9..9c7371f416eaf70f7eaa2c73d8792c1dca8d5cc4 |
| September 22, 2025 15:23 | https://github.com/python/cpython/pull/139234#event-19842392527 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| sethmlarson | https://github.com/sethmlarson |
| code owner | https://github.com/python/cpython/blob/04c4628345b841ae9792ea007d7beffd2846f017/.github/CODEOWNERS#L136 |
| September 22, 2025 15:23 | https://github.com/python/cpython/pull/139234#event-19842392577 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| Sep 22, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3320026992 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| picnixz | https://github.com/picnixz |
| September 22, 2025 18:43 | https://github.com/python/cpython/pull/139234#commits-pushed-1085584 |
|
| https://github.com/picnixz |
| remove unused include | https://github.com/python/cpython/pull/139234/commits/10855847249df4dd140e0a24b441dc6c3bca3846 |
| 1085584 | https://github.com/python/cpython/pull/139234/commits/10855847249df4dd140e0a24b441dc6c3bca3846 |
|
| https://github.com/picnixz |
| fix possible error handling | https://github.com/python/cpython/pull/139234/commits/c10fe919a75b94e43be526b8e3fa74ea9ea6f508 |
| c10fe91 | https://github.com/python/cpython/pull/139234/commits/c10fe919a75b94e43be526b8e3fa74ea9ea6f508 |
|
| https://github.com/picnixz |
| undef macro after usage | https://github.com/python/cpython/pull/139234/commits/18d175f79098b864075d6a2f06f6cc8b3d61b2f3 |
| 18d175f | https://github.com/python/cpython/pull/139234/commits/18d175f79098b864075d6a2f06f6cc8b3d61b2f3 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
|
Sep 22, 2025
| https://github.com/python/cpython/pull/139234#pullrequestreview-3254012579 |
|
View reviewed changes
| https://github.com/python/cpython/pull/139234/files/18d175f79098b864075d6a2f06f6cc8b3d61b2f3 |
| Lib/test/test_pyexpat.py | https://github.com/python/cpython/pull/139234/files/18d175f79098b864075d6a2f06f6cc8b3d61b2f3#diff-bdb65b60742876d0828ee1d7f2c168d36fa02cc202ace32d27c46a7b4a17605d |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
|
| https://github.com/picnixz |
| Update Lib/test/test_pyexpat.py | https://github.com/python/cpython/pull/139234/commits/911b2b7eb9e197ef28725a8292e82bb737c8fa4c |
| 911b2b7 | https://github.com/python/cpython/pull/139234/commits/911b2b7eb9e197ef28725a8292e82bb737c8fa4c |
| https://github.com/hartwork |
| hartwork | https://github.com/hartwork |
| Sep 22, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3320155058 |
| @picnixz | https://github.com/picnixz |
| @hartwork | https://github.com/hartwork |
| @picnixz | https://github.com/picnixz |
| https://libexpat.github.io/doc/api/latest/#XML_SetAllocTrackerMaximumAmplification | https://libexpat.github.io/doc/api/latest/#XML_SetAllocTrackerMaximumAmplification |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| Sep 22, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3320225556 |
| XML_SetAllocTrackerMaximumAmplification | https://libexpat.github.io/doc/api/latest/#XML_SetAllocTrackerMaximumAmplification |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| Sep 22, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3320228062 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
|
| https://github.com/picnixz |
| update comments | https://github.com/python/cpython/pull/139234/commits/d63668539630127da9be8bad570590f9a1b4aab3 |
| d636685 | https://github.com/python/cpython/pull/139234/commits/d63668539630127da9be8bad570590f9a1b4aab3 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| force-pushed | https://github.com/python/cpython/compare/4ba478dbba0bd67a61384c90dfa846e2b8ec8d69..d63668539630127da9be8bad570590f9a1b4aab3 |
| 4ba478d | https://github.com/python/cpython/commit/4ba478dbba0bd67a61384c90dfa846e2b8ec8d69 |
| d636685 | https://github.com/python/cpython/commit/d63668539630127da9be8bad570590f9a1b4aab3 |
|
Compare
| https://github.com/python/cpython/compare/4ba478dbba0bd67a61384c90dfa846e2b8ec8d69..d63668539630127da9be8bad570590f9a1b4aab3 |
| September 22, 2025 17:12 | https://github.com/python/cpython/pull/139234#event-19845170620 |
| https://github.com/hartwork |
| hartwork | https://github.com/hartwork |
|
Sep 22, 2025
| https://github.com/python/cpython/pull/139234#pullrequestreview-3253359797 |
|
View reviewed changes
| https://github.com/python/cpython/pull/139234/files/d63668539630127da9be8bad570590f9a1b4aab3 |
| hartwork | https://github.com/hartwork |
| https://github.com/python/cpython/pull/139234#pullrequestreview-3253359797 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| @picnixz | https://github.com/picnixz |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Doc/library/pyexpat.rst | https://github.com/python/cpython/pull/139234/files/3dcd9bd3228dad609ae6395d2175d0f83fe1facd#diff-a739ba3914e4e44366492e0305c5000673e34e958ed59e267ae0b678673bca6f |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Doc/library/pyexpat.rst | https://github.com/python/cpython/pull/139234/files/3dcd9bd3228dad609ae6395d2175d0f83fe1facd#diff-a739ba3914e4e44366492e0305c5000673e34e958ed59e267ae0b678673bca6f |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Doc/library/pyexpat.rst | https://github.com/python/cpython/pull/139234/files/3dcd9bd3228dad609ae6395d2175d0f83fe1facd#diff-a739ba3914e4e44366492e0305c5000673e34e958ed59e267ae0b678673bca6f |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Lib/test/test_pyexpat.py | https://github.com/python/cpython/pull/139234/files/911b2b7eb9e197ef28725a8292e82bb737c8fa4c#diff-bdb65b60742876d0828ee1d7f2c168d36fa02cc202ace32d27c46a7b4a17605d |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Lib/test/test_pyexpat.py | https://github.com/python/cpython/pull/139234/files/911b2b7eb9e197ef28725a8292e82bb737c8fa4c#diff-bdb65b60742876d0828ee1d7f2c168d36fa02cc202ace32d27c46a7b4a17605d |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Modules/pyexpat.c | https://github.com/python/cpython/pull/139234/files/911b2b7eb9e197ef28725a8292e82bb737c8fa4c#diff-0534aca0d881f2dd1100e875602f98da60bf20ce127564896dc1e8a92a6fad2c |
| hartwork | https://github.com/hartwork |
| Sep 22, 2025 | https://github.com/python/cpython/pull/139234#discussion_r2369510694 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| picnixz | https://github.com/picnixz |
| Sep 22, 2025 | https://github.com/python/cpython/pull/139234#discussion_r2369741535 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| hartwork | https://github.com/hartwork |
| Sep 22, 2025 | https://github.com/python/cpython/pull/139234#discussion_r2369795157 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| @picnixz | https://github.com/picnixz |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| picnixz | https://github.com/picnixz |
| Sep 22, 2025 | https://github.com/python/cpython/pull/139234#discussion_r2369866722 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| hartwork | https://github.com/hartwork |
| Sep 22, 2025 | https://github.com/python/cpython/pull/139234#discussion_r2369889273 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| @picnixz | https://github.com/picnixz |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| picnixz | https://github.com/picnixz |
| Sep 23, 2025 | https://github.com/python/cpython/pull/139234#discussion_r2372609125 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| hartwork | https://github.com/hartwork |
| Sep 23, 2025 | https://github.com/python/cpython/pull/139234#discussion_r2372647278 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| @picnixz | https://github.com/picnixz |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| picnixz | https://github.com/picnixz |
| Sep 23, 2025 | https://github.com/python/cpython/pull/139234#discussion_r2372849465 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| hartwork | https://github.com/hartwork |
| Sep 23, 2025 | https://github.com/python/cpython/pull/139234#discussion_r2373571019 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| @picnixz | https://github.com/picnixz |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| picnixz | https://github.com/picnixz |
| Sep 24, 2025 | https://github.com/python/cpython/pull/139234#discussion_r2375074347 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Modules/pyexpat.c | https://github.com/python/cpython/pull/139234/files/911b2b7eb9e197ef28725a8292e82bb737c8fa4c#diff-0534aca0d881f2dd1100e875602f98da60bf20ce127564896dc1e8a92a6fad2c |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Lib/test/test_pyexpat.py | https://github.com/python/cpython/pull/139234/files/c1c23fbf29411a1c52b326874a95df1b8da65d64..12bef9ceac44b3b70ef41bf97f389d0d8291721e#diff-bdb65b60742876d0828ee1d7f2c168d36fa02cc202ace32d27c46a7b4a17605d |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Lib/test/test_pyexpat.py | https://github.com/python/cpython/pull/139234/files/c1c23fbf29411a1c52b326874a95df1b8da65d64..12bef9ceac44b3b70ef41bf97f389d0d8291721e#diff-bdb65b60742876d0828ee1d7f2c168d36fa02cc202ace32d27c46a7b4a17605d |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Doc/library/pyexpat.rst | https://github.com/python/cpython/pull/139234/files/d63668539630127da9be8bad570590f9a1b4aab3#diff-a739ba3914e4e44366492e0305c5000673e34e958ed59e267ae0b678673bca6f |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| https://github.com/hartwork |
| hartwork | https://github.com/hartwork |
| Sep 22, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3320608800 |
| @picnixz | https://github.com/picnixz |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| https://github.com/hartwork |
| hartwork | https://github.com/hartwork |
|
Sep 22, 2025
| https://github.com/python/cpython/pull/139234#ref-pullrequest-3442186069 |
|
xmlwf: Resolve use of functions XML_GetErrorLineNumber and XML_GetErrorColumnNumber
libexpat/libexpat#1053
| https://github.com/libexpat/libexpat/pull/1053 |
| picnixz | https://github.com/picnixz |
| September 22, 2025 20:37 | https://github.com/python/cpython/pull/139234#commits-pushed-b951065 |
|
| https://github.com/picnixz |
| use better test names | https://github.com/python/cpython/pull/139234/commits/b9510650de13c2b688e198f2df5fc0c7e0b9fca2 |
| b951065 | https://github.com/python/cpython/pull/139234/commits/b9510650de13c2b688e198f2df5fc0c7e0b9fca2 |
|
| https://github.com/picnixz |
| simplify roles usage | https://github.com/python/cpython/pull/139234/commits/e11bf14f1f6d84ee16812f0c022699b7f7eab2b5 |
| e11bf14 | https://github.com/python/cpython/pull/139234/commits/e11bf14f1f6d84ee16812f0c022699b7f7eab2b5 |
| picnixz | https://github.com/picnixz |
|
Sep 28, 2025
| https://github.com/python/cpython/pull/139234#ref-commit-b52fc88 |
|
| https://github.com/picnixz |
| pythongh-90949 | https://github.com/python/cpython/issues/90949 |
| : amend | https://github.com/picnixz/cpython/commit/b52fc8829759e9ae63b19b857c892665c3f29ca1 |
| pythonGH-139234 | https://github.com/python/cpython/pull/139234 |
| in prevision of future mitigati… | https://github.com/picnixz/cpython/commit/b52fc8829759e9ae63b19b857c892665c3f29ca1 |
| b52fc88 | https://github.com/picnixz/cpython/commit/b52fc8829759e9ae63b19b857c892665c3f29ca1 |
| python#139366 | https://github.com/python/cpython/pull/139366 |
| f04bea4 | https://github.com/picnixz/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| https://github.com/hartwork |
| hartwork | https://github.com/hartwork |
| Sep 28, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3343574246 |
| @picnixz | https://github.com/picnixz |
| gh-115398: Expose Expat >=2.6.0 reparse deferral API (CVE-2023-52425) #115623 | https://github.com/python/cpython/pull/115623 |
| gh-115398: Suggest use of hasattr with checking for 3.13 Expat API availability #116278 | https://github.com/python/cpython/pull/116278 |
| gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" #115400 | https://github.com/python/cpython/pull/115400 |
| CVE-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| @picnixz | https://github.com/picnixz |
| #116278 | https://github.com/python/cpython/pull/116278 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| Sep 28, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3343674992 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| Sep 28, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3343701835 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| https://github.com/hartwork |
| hartwork | https://github.com/hartwork |
|
Sep 28, 2025
| https://github.com/python/cpython/pull/139234#ref-pullrequest-3457954455 |
|
[3.14] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234)
#139359
| https://github.com/python/cpython/pull/139359 |
| https://github.com/hartwork |
| hartwork | https://github.com/hartwork |
| Sep 28, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3343906272 |
| @picnixz | https://github.com/picnixz |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| Sep 28, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3343927539 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| https://github.com/hartwork |
| hartwork | https://github.com/hartwork |
| Sep 28, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3343977134 |
| @picnixz | https://github.com/picnixz |
| #115623 | https://github.com/python/cpython/pull/115623 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| Sep 28, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3344012598 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| https://github.com/python/cpython/blob/main/Lib/xml/sax/expatreader.py#L284-L295 | https://github.com/python/cpython/blob/main/Lib/xml/sax/expatreader.py#L284-L295 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| hartwork | https://github.com/hartwork |
|
Oct 2, 2025
| https://github.com/python/cpython/pull/139234#ref-commit-aeefb63 |
|
| https://github.com/picnixz |
|
| https://github.com/hartwork |
| [3.12] | https://github.com/hartwork/cpython/commit/aeefb6374ea12bea1789d8a3c82ce270f689ec1b |
| pythongh-90949 | https://github.com/python/cpython/issues/90949 |
| : add Expat API to prevent XML deadly allocations ( | https://github.com/hartwork/cpython/commit/aeefb6374ea12bea1789d8a3c82ce270f689ec1b |
| aeefb63 | https://github.com/hartwork/cpython/commit/aeefb6374ea12bea1789d8a3c82ce270f689ec1b |
| CVE-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| pythonGH-139234 | https://github.com/python/cpython/pull/139234 |
| CVE-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| f04bea4 | https://github.com/hartwork/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| hartwork | https://github.com/hartwork |
|
Oct 2, 2025
| https://github.com/python/cpython/pull/139234#ref-commit-a5d026a |
|
| https://github.com/picnixz |
|
| https://github.com/hartwork |
| pythongh-90949 | https://github.com/python/cpython/issues/90949 |
| : amend | https://github.com/hartwork/cpython/commit/a5d026aa2975c9d817f5273b2584666801c5e570 |
| pythonGH-139234 | https://github.com/python/cpython/pull/139234 |
| in prevision of future mitigati… | https://github.com/hartwork/cpython/commit/a5d026aa2975c9d817f5273b2584666801c5e570 |
| a5d026a | https://github.com/hartwork/cpython/commit/a5d026aa2975c9d817f5273b2584666801c5e570 |
| python#139366 | https://github.com/python/cpython/pull/139366 |
| f04bea4 | https://github.com/hartwork/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| 68a1778 | https://github.com/hartwork/cpython/commit/68a1778b7721f3fb853cd3aa674f7039c2a4df36 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
| Oct 2, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3363537678 |
| GH-139527 | https://github.com/python/cpython/pull/139527 |
| 3.12 branch | https://github.com/python/cpython/tree/3.12 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
needs backport to 3.12
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.12%22 |
| Oct 2, 2025 | https://github.com/python/cpython/pull/139234#event-20070373839 |
| hartwork | https://github.com/hartwork |
|
Oct 2, 2025
| https://github.com/python/cpython/pull/139234#ref-commit-a295473 |
|
| https://github.com/picnixz |
|
| https://github.com/hartwork |
| pythongh-90949 | https://github.com/python/cpython/issues/90949 |
| : add Expat API to prevent XML deadly allocations ( | https://github.com/hartwork/cpython/commit/a295473f24ea0eacf17dae5485150f2f612ae264 |
| CVE-… | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| a295473 | https://github.com/hartwork/cpython/commit/a295473f24ea0eacf17dae5485150f2f612ae264 |
| …2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| python#139234 | https://github.com/python/cpython/pull/139234 |
| CVE-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| f04bea4 | https://github.com/hartwork/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| hartwork | https://github.com/hartwork |
|
Oct 2, 2025
| https://github.com/python/cpython/pull/139234#ref-commit-5680561 |
|
| https://github.com/picnixz |
|
| https://github.com/hartwork |
| pythongh-90949 | https://github.com/python/cpython/issues/90949 |
| : amend | https://github.com/hartwork/cpython/commit/5680561ce633d02b2ae0e486ef574780161ffcdc |
| pythonGH-139234 | https://github.com/python/cpython/pull/139234 |
| in prevision of future mitigati… | https://github.com/hartwork/cpython/commit/5680561ce633d02b2ae0e486ef574780161ffcdc |
| 5680561 | https://github.com/hartwork/cpython/commit/5680561ce633d02b2ae0e486ef574780161ffcdc |
| python#139366 | https://github.com/python/cpython/pull/139366 |
| f04bea4 | https://github.com/hartwork/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| 68a1778 | https://github.com/hartwork/cpython/commit/68a1778b7721f3fb853cd3aa674f7039c2a4df36 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
| Oct 2, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3363611307 |
| GH-139529 | https://github.com/python/cpython/pull/139529 |
| 3.11 branch | https://github.com/python/cpython/tree/3.11 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
needs backport to 3.11
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.11%22 |
| Oct 2, 2025 | https://github.com/python/cpython/pull/139234#event-20070658725 |
| hartwork | https://github.com/hartwork |
|
Oct 3, 2025
| https://github.com/python/cpython/pull/139234#ref-commit-de690f1 |
|
| https://github.com/picnixz |
|
| https://github.com/hartwork |
| pythongh-90949 | https://github.com/python/cpython/issues/90949 |
| : add Expat API to prevent XML deadly allocations ( | https://github.com/hartwork/cpython/commit/de690f1e45672dfbf648695d15d775bf073c5155 |
| CVE-… | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| de690f1 | https://github.com/hartwork/cpython/commit/de690f1e45672dfbf648695d15d775bf073c5155 |
| …2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| python#139234 | https://github.com/python/cpython/pull/139234 |
| CVE-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| f04bea4 | https://github.com/hartwork/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| hartwork | https://github.com/hartwork |
|
Oct 3, 2025
| https://github.com/python/cpython/pull/139234#ref-commit-6ae7665 |
|
| https://github.com/picnixz |
|
| https://github.com/hartwork |
| pythongh-90949 | https://github.com/python/cpython/issues/90949 |
| : amend | https://github.com/hartwork/cpython/commit/6ae7665443dca42055ecbe5a9e45bcc3cac8fef2 |
| pythonGH-139234 | https://github.com/python/cpython/pull/139234 |
| in prevision of future mitigati… | https://github.com/hartwork/cpython/commit/6ae7665443dca42055ecbe5a9e45bcc3cac8fef2 |
| 6ae7665 | https://github.com/hartwork/cpython/commit/6ae7665443dca42055ecbe5a9e45bcc3cac8fef2 |
| python#139366 | https://github.com/python/cpython/pull/139366 |
| f04bea4 | https://github.com/hartwork/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| 68a1778 | https://github.com/hartwork/cpython/commit/68a1778b7721f3fb853cd3aa674f7039c2a4df36 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
| Oct 3, 2025 | https://github.com/python/cpython/pull/139234#issuecomment-3363726205 |
| GH-139532 | https://github.com/python/cpython/pull/139532 |
| 3.10 branch | https://github.com/python/cpython/tree/3.10 |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
needs backport to 3.10
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.10%22 |
| Oct 3, 2025 | https://github.com/python/cpython/pull/139234#event-20071302715 |
| picnixz | https://github.com/picnixz |
|
Oct 4, 2025
| https://github.com/python/cpython/pull/139234#ref-commit-fc48a3c |
|
| https://github.com/hartwork |
| gh-90949 | https://github.com/python/cpython/issues/90949 |
| : Fix an "unused function" compiler warning introduced in | https://github.com/python/cpython/commit/fc48a3c9cac5b9e8c6a56ec2294b01a8da9f8dee |
| GH-… | https://github.com/python/cpython/pull/139234 |
| fc48a3c | https://github.com/python/cpython/commit/fc48a3c9cac5b9e8c6a56ec2294b01a8da9f8dee |
| …139234 | https://github.com/python/cpython/pull/139234 |
| #139558 | https://github.com/python/cpython/pull/139558 |
| f04bea4 | https://github.com/python/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| danigm | https://github.com/danigm |
|
Oct 7, 2025
| https://github.com/python/cpython/pull/139234#ref-commit-1aead6b |
|
| https://github.com/hartwork |
|
| https://github.com/danigm |
| pythongh-90949 | https://github.com/python/cpython/issues/90949 |
| : Fix an "unused function" compiler warning introduced in | https://github.com/openSUSE-Python/cpython/commit/1aead6be844520fe7ed55b118e3364fe24cdfbbb |
| 1aead6b | https://github.com/openSUSE-Python/cpython/commit/1aead6be844520fe7ed55b118e3364fe24cdfbbb |
| pythonGH-139234 | https://github.com/python/cpython/pull/139234 |
| python#139558 | https://github.com/python/cpython/pull/139558 |
| f04bea4 | https://github.com/openSUSE-Python/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| https://github.com/hartwork |
| hartwork | https://github.com/hartwork |
|
Oct 9, 2025
| https://github.com/python/cpython/pull/139234#ref-pullrequest-3496404197 |
|
gh-90949: Recommend hasattr with Expat security methods
#139800
| https://github.com/python/cpython/pull/139800 |
| picnixz | https://github.com/picnixz |
|
Nov 2, 2025
| https://github.com/python/cpython/pull/139234#ref-commit-bf2865f |
|
| https://github.com/picnixz |
| [3.14] | https://github.com/python/cpython/commit/bf2865f80f50d0a9a4ea7082ced6087fa76b6f7c |
| gh-90949 | https://github.com/python/cpython/issues/90949 |
| : add Expat API to prevent XML deadly allocations ( | https://github.com/python/cpython/commit/bf2865f80f50d0a9a4ea7082ced6087fa76b6f7c |
| CVE… | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| bf2865f | https://github.com/python/cpython/commit/bf2865f80f50d0a9a4ea7082ced6087fa76b6f7c |
| …-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| GH-139234 | https://github.com/python/cpython/pull/139234 |
| #139359 | https://github.com/python/cpython/pull/139359 |
| gh-90949 | https://github.com/python/cpython/issues/90949 |
| CVE-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| GH-139234 | https://github.com/python/cpython/pull/139234 |
| CVE-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| f04bea4 | https://github.com/python/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| 68a1778 | https://github.com/python/cpython/commit/68a1778b7721f3fb853cd3aa674f7039c2a4df36 |
| picnixz | https://github.com/picnixz |
|
Nov 2, 2025
| https://github.com/python/cpython/pull/139234#ref-commit-bc36bd1 |
|
| https://github.com/hartwork |
| [3.13] | https://github.com/python/cpython/commit/bc36bd1786b8921546b70d745aef3912af588bbb |
| gh-90949 | https://github.com/python/cpython/issues/90949 |
| : add Expat API to prevent XML deadly allocations ( | https://github.com/python/cpython/commit/bc36bd1786b8921546b70d745aef3912af588bbb |
| CVE… | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| bc36bd1 | https://github.com/python/cpython/commit/bc36bd1786b8921546b70d745aef3912af588bbb |
| …-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| GH-139234 | https://github.com/python/cpython/pull/139234 |
| #139367 | https://github.com/python/cpython/pull/139367 |
| gh-90949 | https://github.com/python/cpython/issues/90949 |
| CVE-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| #139234 | https://github.com/python/cpython/pull/139234 |
| CVE-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| f04bea4 | https://github.com/python/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| 68a1778 | https://github.com/python/cpython/commit/68a1778b7721f3fb853cd3aa674f7039c2a4df36 |
| pablogsal | https://github.com/pablogsal |
|
Nov 25, 2025
| https://github.com/python/cpython/pull/139234#ref-commit-1173f80 |
|
| https://github.com/hartwork |
|
| https://github.com/picnixz |
| [3.10] | https://github.com/python/cpython/commit/1173f8068b9a8c1168780532c466c391be10bf67 |
| gh-90949 | https://github.com/python/cpython/issues/90949 |
| : add Expat API to prevent XML deadly allocations ( | https://github.com/python/cpython/commit/1173f8068b9a8c1168780532c466c391be10bf67 |
| CVE… | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| 1173f80 | https://github.com/python/cpython/commit/1173f8068b9a8c1168780532c466c391be10bf67 |
| …-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| GH-139234 | https://github.com/python/cpython/pull/139234 |
| #139532 | https://github.com/python/cpython/pull/139532 |
| pablogsal | https://github.com/pablogsal |
|
Nov 25, 2025
| https://github.com/python/cpython/pull/139234#ref-commit-9bbb68a |
|
| https://github.com/hartwork |
|
| https://github.com/picnixz |
| [3.11] | https://github.com/python/cpython/commit/9bbb68a52456655f15953ff0e2ee4e2bdbf78c1e |
| gh-90949 | https://github.com/python/cpython/issues/90949 |
| : add Expat API to prevent XML deadly allocations ( | https://github.com/python/cpython/commit/9bbb68a52456655f15953ff0e2ee4e2bdbf78c1e |
| CVE… | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| 9bbb68a | https://github.com/python/cpython/commit/9bbb68a52456655f15953ff0e2ee4e2bdbf78c1e |
| …-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| GH-139234 | https://github.com/python/cpython/pull/139234 |
| #139529 | https://github.com/python/cpython/pull/139529 |
| https://github.com/dg-pb |
| dg-pb | https://github.com/dg-pb |
|
Nov 27, 2025
| https://github.com/python/cpython/pull/139234#ref-issue-3673211550 |
|
Add c-analyzer fails for pyexpat.c
#142025
| https://github.com/python/cpython/issues/142025 |
| Yhg1s | https://github.com/Yhg1s |
|
Dec 17, 2025
| https://github.com/python/cpython/pull/139234#ref-commit-0e4cd89 |
|
| https://github.com/hartwork |
|
| https://github.com/picnixz |
| [3.12] | https://github.com/python/cpython/commit/0e4cd897811651d896c5be9beec803b506131c7c |
| gh-90949 | https://github.com/python/cpython/issues/90949 |
| : add Expat API to prevent XML deadly allocations ( | https://github.com/python/cpython/commit/0e4cd897811651d896c5be9beec803b506131c7c |
| CVE… | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| 0e4cd89 | https://github.com/python/cpython/commit/0e4cd897811651d896c5be9beec803b506131c7c |
| …-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| GH-139234 | https://github.com/python/cpython/pull/139234 |
| #139527 | https://github.com/python/cpython/pull/139527 |
| gh-90949 | https://github.com/python/cpython/issues/90949 |
| CVE-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| GH-139234 | https://github.com/python/cpython/pull/139234 |
| CVE-2025-59375 | https://github.com/advisories/GHSA-vjqp-pjp6-xcxx |
| f04bea4 | https://github.com/python/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| 68a1778 | https://github.com/python/cpython/commit/68a1778b7721f3fb853cd3aa674f7039c2a4df36 |
| https://github.co/hiddenchars |
| https://github.com/python/cpython/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F139234 |
|
| https://github.com/AA-Turner |
|
AA-Turner
| https://github.com/AA-Turner |
|
| https://github.com/python/cpython/pull/139234/files/9d538e416d962d6649c69c5797b5fb343e2c8237 |
|
| https://github.com/hartwork |
|
hartwork
| https://github.com/hartwork |
|
| https://github.com/python/cpython/pull/139234/files/ce8cb488a94f5e7aa6e28f93416cab5e385b648d |
|
| https://github.com/picnixz |
|
picnixz
| https://github.com/picnixz |
|
topic-XML
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3Atopic-XML |
| Please reload this page | https://github.com/python/cpython/pull/139234 |
|
| https://github.com/picnixz |
|
| https://github.com/hartwork |
|
| https://github.com/AA-Turner |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |