| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:eb895681-7cdc-8ebe-2547-a91a4c8cf75b |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | EBA4:3E9070:8D0468:BFA1AF:6A554F31 |
| html-safe-nonce | 316f816bc181038933b0f6b26fa9c3793a74888d155672e895402ffa4ddd57a8 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFQkE0OjNFOTA3MDo4RDA0Njg6QkZBMUFGOjZBNTU0RjMxIiwidmlzaXRvcl9pZCI6IjM0NDUzNjU4NDU0MzM2MDE4NDEiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | ec014456152373c9a7680fcc11880cdd4f7a29e88f8db99bed9c6e6ba82b5c20 |
| hovercard-subject-tag | pull_request:2864807809 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///voltron/pull_requests_fragments/pull_request_layout |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/python/cpython/139368/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/1f619599f4aa3fc48f2861262e68c2eb7b4d75bb0b50bf4eb2989f37c525ca8f/python/cpython/pull/139368 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/1f619599f4aa3fc48f2861262e68c2eb7b4d75bb0b50bf4eb2989f37c525ca8f/python/cpython/pull/139368 |
| og:image:alt | This is built on top of #139366.
cc @hartwork
Issue: Expose Expat XML attack protection APIs #90949
📚 Documentation preview 📚: https://cpython-previews--139368.org.readthedocs.build/ |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | picnixz |
| hostname | github.com |
| expected-hostname | github.com |
| None | cd9eea424140838b22e9eabd53d92b5702617ddd6d76efcd3a37f08d44309ca5 |
| turbo-cache-control | no-cache |
| go-import | github.com/python/cpython git https://github.com/python/cpython.git |
| octolytics-dimension-user_id | 1525981 |
| octolytics-dimension-user_login | python |
| octolytics-dimension-repository_id | 81598961 |
| octolytics-dimension-repository_nwo | python/cpython |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 81598961 |
| octolytics-dimension-repository_network_root_nwo | python/cpython |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 3084b9f587e8f1e19803bbe0c77ac77ce3c99c5c |
| ui-target | canary-2 |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/python/cpython/pull/139368#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F139368 |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/open-source/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/open-source/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F139368 |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=python%2Fcpython |
| Reload | https://github.com/python/cpython/pull/139368 |
| Reload | https://github.com/python/cpython/pull/139368 |
| Reload | https://github.com/python/cpython/pull/139368 |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
|
python
| https://github.com/python |
| cpython | https://github.com/python/cpython |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
|
Notifications
| https://github.com/login?return_to=%2Fpython%2Fcpython |
|
Fork
35k
| https://github.com/login?return_to=%2Fpython%2Fcpython |
|
Star
73.8k
| https://github.com/login?return_to=%2Fpython%2Fcpython |
|
Code
| https://github.com/python/cpython |
|
Issues
5k+
| https://github.com/python/cpython/issues |
|
Pull requests
2.3k
| https://github.com/python/cpython/pulls |
|
Actions
| https://github.com/python/cpython/actions |
|
Projects
| https://github.com/python/cpython/projects |
|
Security and quality
0
| https://github.com/python/cpython/security |
|
Insights
| https://github.com/python/cpython/pulse |
|
Code
| https://github.com/python/cpython |
|
Issues
| https://github.com/python/cpython/issues |
|
Pull requests
| https://github.com/python/cpython/pulls |
|
Actions
| https://github.com/python/cpython/actions |
|
Projects
| https://github.com/python/cpython/projects |
|
Security and quality
| https://github.com/python/cpython/security |
|
Insights
| https://github.com/python/cpython/pulse |
| picnixz | https://github.com/picnixz |
| python:main | https://github.com/python/cpython/tree/main |
| picnixz:feat/xml/1e9-lolz-api-90949 | https://github.com/picnixz/cpython/tree/feat/xml/1e9-lolz-api-90949 |
| Conversation | https://github.com/python/cpython/pull/139368 |
| Commits7 (7) | https://github.com/python/cpython/pull/139368/commits |
| Checks | https://github.com/python/cpython/pull/139368/checks |
| Files changed | https://github.com/python/cpython/pull/139368/files |
| gh-90949: expose Expat API to tune exponential expansion protections | https://github.com/python/cpython/pull/139368#top |
| picnixz | https://github.com/picnixz |
| python:main | https://github.com/python/cpython/tree/main |
| picnixz:feat/xml/1e9-lolz-api-90949 | https://github.com/picnixz/cpython/tree/feat/xml/1e9-lolz-api-90949 |
|
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| Sep 26, 2025 | https://github.com/python/cpython/pull/139368#issue-3458324409 |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| #139366 | https://github.com/python/cpython/pull/139366 |
| @hartwork | https://github.com/hartwork |
| Expose Expat XML attack protection APIs #90949 | https://github.com/python/cpython/issues/90949 |
| https://cpython-previews--139368.org.readthedocs.build/ | https://cpython-previews--139368.org.readthedocs.build/ |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
|
| https://github.com/picnixz |
| expose Expat mitigation API to prevent exponential expansions | https://github.com/python/cpython/pull/139368/commits/bba2678dbac5cab126810580277f61216c73dbd4 |
| bba2678 | https://github.com/python/cpython/pull/139368/commits/bba2678dbac5cab126810580277f61216c73dbd4 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| AA-Turner | https://github.com/AA-Turner |
| code owner | https://github.com/python/cpython/blob/8288f3693f50058ad9b9fe04e01f5dad902d8bad/.github/CODEOWNERS#L110 |
| September 26, 2025 16:38 | https://github.com/python/cpython/pull/139368#event-19948177306 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
awaiting core review
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22awaiting%20core%20review%22 |
| Sep 26, 2025 | https://github.com/python/cpython/pull/139368#event-19948179593 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
Sep 26, 2025
| https://github.com/python/cpython/pull/139368#ref-issue-1199075598 |
|
Expose Expat XML attack protection APIs
#90949
| https://github.com/python/cpython/issues/90949 |
| https://github.com/hartwork |
| hartwork | https://github.com/hartwork |
|
Sep 26, 2025
| https://github.com/python/cpython/pull/139368#pullrequestreview-3273033559 |
|
View reviewed changes
| https://github.com/python/cpython/pull/139368/files/bba2678dbac5cab126810580277f61216c73dbd4 |
| hartwork | https://github.com/hartwork |
| https://github.com/python/cpython/pull/139368#pullrequestreview-3273033559 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| @picnixz | https://github.com/picnixz |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| Misc/NEWS.d/next/Library/2025-09-26-18-04-28.gh-issue-90949.YHjSzX.rst | https://github.com/python/cpython/pull/139368/files/bba2678dbac5cab126810580277f61216c73dbd4#diff-425971b60f1f0d334e060cf3968650659f14c927bd0debd1f95415029f8b766f |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| picnixz | https://github.com/picnixz |
| September 26, 2025 20:22 | https://github.com/python/cpython/pull/139368#commits-pushed-363bcbc |
|
| https://github.com/picnixz |
| Merge branch 'main' into feat/xml/1e9-lolz-api-90949 | https://github.com/python/cpython/pull/139368/commits/363bcbc5cab8b9b5f70f83834fa310fb1cbbc169 |
| 363bcbc | https://github.com/python/cpython/pull/139368/commits/363bcbc5cab8b9b5f70f83834fa310fb1cbbc169 |
|
| https://github.com/picnixz |
| Update pyexpat.c | https://github.com/python/cpython/pull/139368/commits/501ef0eab298e3f5824929930c49f186a430f5dd |
| 501ef0e | https://github.com/python/cpython/pull/139368/commits/501ef0eab298e3f5824929930c49f186a430f5dd |
|
| https://github.com/picnixz |
| Update pyexpat.c | https://github.com/python/cpython/pull/139368/commits/197dfa7e82c08edccf998edea05ed5c05922b2b4 |
| 197dfa7 | https://github.com/python/cpython/pull/139368/commits/197dfa7e82c08edccf998edea05ed5c05922b2b4 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
|
Sep 26, 2025
| https://github.com/python/cpython/pull/139368#pullrequestreview-3273394571 |
|
View reviewed changes
| https://github.com/python/cpython/pull/139368/files/197dfa7e82c08edccf998edea05ed5c05922b2b4 |
| picnixz | https://github.com/picnixz |
| https://github.com/python/cpython/pull/139368#pullrequestreview-3273394571 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/gpshead |
| gpshead | https://github.com/gpshead |
|
Sep 27, 2025
| https://github.com/python/cpython/pull/139368#pullrequestreview-3274389087 |
|
View reviewed changes
| https://github.com/python/cpython/pull/139368/files/197dfa7e82c08edccf998edea05ed5c05922b2b4 |
| Doc/library/pyexpat.rst | https://github.com/python/cpython/pull/139368/files/197dfa7e82c08edccf998edea05ed5c05922b2b4#diff-a739ba3914e4e44366492e0305c5000673e34e958ed59e267ae0b678673bca6f |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| Doc/library/pyexpat.rst | https://github.com/python/cpython/pull/139368/files/197dfa7e82c08edccf998edea05ed5c05922b2b4#diff-a739ba3914e4e44366492e0305c5000673e34e958ed59e267ae0b678673bca6f |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| Doc/library/pyexpat.rst | https://github.com/python/cpython/pull/139368/files/197dfa7e82c08edccf998edea05ed5c05922b2b4#diff-a739ba3914e4e44366492e0305c5000673e34e958ed59e267ae0b678673bca6f |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
|
| https://github.com/picnixz |
| address reviews | https://github.com/python/cpython/pull/139368/commits/9734458b4f9518a53ad956753301b41714b27d4e |
| 9734458 | https://github.com/python/cpython/pull/139368/commits/9734458b4f9518a53ad956753301b41714b27d4e |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| gpshead | https://github.com/gpshead |
| hartwork | https://github.com/hartwork |
| September 27, 2025 08:19 | https://github.com/python/cpython/pull/139368#event-19957208799 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| Sep 27, 2025 | https://github.com/python/cpython/pull/139368#event-19957270637 |
|
| https://github.com/picnixz |
| clinic and comments | https://github.com/python/cpython/pull/139368/commits/6c2eab775d5be4e2a53362f2fb34bc893dd1a39a |
| 6c2eab7 | https://github.com/python/cpython/pull/139368/commits/6c2eab775d5be4e2a53362f2fb34bc893dd1a39a |
| https://github.com/hartwork |
| hartwork | https://github.com/hartwork |
|
Sep 27, 2025
| https://github.com/python/cpython/pull/139368#pullrequestreview-3275004106 |
|
View reviewed changes
| https://github.com/python/cpython/pull/139368/files/6c2eab775d5be4e2a53362f2fb34bc893dd1a39a |
| hartwork | https://github.com/hartwork |
| https://github.com/python/cpython/pull/139368#pullrequestreview-3275004106 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| @picnixz | https://github.com/picnixz |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| Sep 27, 2025 | https://github.com/python/cpython/pull/139368#issuecomment-3341891249 |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/gpshead |
| gpshead | https://github.com/gpshead |
|
Sep 27, 2025
| https://github.com/python/cpython/pull/139368#pullrequestreview-3275018403 |
|
View reviewed changes
| https://github.com/python/cpython/pull/139368/files/6c2eab775d5be4e2a53362f2fb34bc893dd1a39a |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
awaiting merge
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22awaiting%20merge%22 |
|
awaiting core review
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22awaiting%20core%20review%22 |
| Sep 27, 2025 | https://github.com/python/cpython/pull/139368#event-19959701369 |
|
| https://github.com/picnixz |
| update NEWS | https://github.com/python/cpython/pull/139368/commits/3ec2ebd647d04c8ae75470d9cb5024b4dfd31644 |
| 3ec2ebd | https://github.com/python/cpython/pull/139368/commits/3ec2ebd647d04c8ae75470d9cb5024b4dfd31644 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| September 28, 2025 07:58 | https://github.com/python/cpython/pull/139368#event-19963711940 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| Sep 28, 2025 | https://github.com/python/cpython/pull/139368#event-19963713775 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| 6661123 | https://github.com/python/cpython/commit/666112376d574c7802646ee1df6244062671cd61 |
| Sep 28, 2025 | https://github.com/python/cpython/pull/139368#event-19964003298 |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
awaiting merge
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22awaiting%20merge%22 |
| Sep 28, 2025 | https://github.com/python/cpython/pull/139368#event-19964003418 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| September 28, 2025 08:37 | https://github.com/python/cpython/pull/139368#event-19964119942 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| Sep 28, 2025 | https://github.com/python/cpython/pull/139368#issuecomment-3342577427 |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
|
gh-90949: Fix an "unused function" compiler warning introduced in GH-139234
#139558
| https://github.com/python/cpython/pull/139558 |
|
gh-139400: Make sure that parent parsers outlive their subparsers in pyexpat
#139403
| https://github.com/python/cpython/pull/139403 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
|
Oct 26, 2025
| https://github.com/python/cpython/pull/139368#ref-pullrequest-3457954455 |
|
[3.14] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234)
#139359
| https://github.com/python/cpython/pull/139359 |
| https://github.com/hartwork |
| hartwork | https://github.com/hartwork |
| Dec 17, 2025 | https://github.com/python/cpython/pull/139368#issuecomment-3665836552 |
| @picnixz | https://github.com/picnixz |
| #90949 | https://github.com/python/cpython/issues/90949 |
| #139558 | https://github.com/python/cpython/pull/139558 |
| #139800 | https://github.com/python/cpython/pull/139800 |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/StanFromIreland |
| StanFromIreland | https://github.com/StanFromIreland |
|
needs backport to 3.10
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.10%22 |
|
needs backport to 3.11
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.11%22 |
|
needs backport to 3.12
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.12%22 |
|
needs backport to 3.13
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.13%22 |
|
needs backport to 3.14
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.14%22 |
| May 24, 2026 | https://github.com/python/cpython/pull/139368#event-25899837790 |
| https://github.com/apps/miss-islington-app |
| miss-islington-app | https://github.com/apps/miss-islington-app |
| May 24, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4528953794 |
| @picnixz | https://github.com/picnixz |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/apps/miss-islington-app |
| miss-islington-app | https://github.com/apps/miss-islington-app |
| May 24, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4528953795 |
| @picnixz | https://github.com/picnixz |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/apps/miss-islington-app |
| miss-islington-app | https://github.com/apps/miss-islington-app |
| May 24, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4528953797 |
| @picnixz | https://github.com/picnixz |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/apps/miss-islington-app |
| miss-islington-app | https://github.com/apps/miss-islington-app |
| May 24, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4528953806 |
| @picnixz | https://github.com/picnixz |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/apps/miss-islington-app |
| miss-islington-app | https://github.com/apps/miss-islington-app |
| May 24, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4528953814 |
| @picnixz | https://github.com/picnixz |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/apps/miss-islington-app |
| miss-islington-app | https://github.com/apps/miss-islington-app |
| May 24, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4528953971 |
| @picnixz | https://github.com/picnixz |
| cherry_picker | https://pypi.org/project/cherry-picker/ |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/apps/miss-islington-app |
| miss-islington-app | https://github.com/apps/miss-islington-app |
| picnixz | https://github.com/picnixz |
| May 24, 2026 | https://github.com/python/cpython/pull/139368#event-25899839701 |
| https://github.com/apps/miss-islington-app |
| miss-islington-app | https://github.com/apps/miss-islington-app |
| May 24, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4528954128 |
| @picnixz | https://github.com/picnixz |
| cherry_picker | https://pypi.org/project/cherry-picker/ |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/apps/miss-islington-app |
| miss-islington-app | https://github.com/apps/miss-islington-app |
| May 24, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4528954252 |
| @picnixz | https://github.com/picnixz |
| cherry_picker | https://pypi.org/project/cherry-picker/ |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/apps/miss-islington-app |
| miss-islington-app | https://github.com/apps/miss-islington-app |
| May 24, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4528954407 |
| @picnixz | https://github.com/picnixz |
| cherry_picker | https://pypi.org/project/cherry-picker/ |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/apps/miss-islington-app |
| miss-islington-app | https://github.com/apps/miss-islington-app |
| May 24, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4528954573 |
| @picnixz | https://github.com/picnixz |
| cherry_picker | https://pypi.org/project/cherry-picker/ |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/picnixz |
| picnixz | https://github.com/picnixz |
| May 24, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4528958036 |
| @StanFromIreland | https://github.com/StanFromIreland |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/StanFromIreland |
| StanFromIreland | https://github.com/StanFromIreland |
| May 24, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4528965061 |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/StanFromIreland |
| StanFromIreland | https://github.com/StanFromIreland |
|
May 25, 2026
| https://github.com/python/cpython/pull/139368#pullrequestreview-4356939637 |
|
View reviewed changes
| https://github.com/python/cpython/pull/139368/files/3ec2ebd647d04c8ae75470d9cb5024b4dfd31644 |
| Doc/whatsnew/3.15.rst | https://github.com/python/cpython/pull/139368/files/3ec2ebd647d04c8ae75470d9cb5024b4dfd31644#diff-bd7a9c5b54eeb2b40e6db5e48e8d79d309d8738e776a40918773c6840189edf9 |
| StanFromIreland | https://github.com/StanFromIreland |
| May 25, 2026 | https://github.com/python/cpython/pull/139368#discussion_r3298393948 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| picnixz | https://github.com/picnixz |
| May 25, 2026 | https://github.com/python/cpython/pull/139368#discussion_r3298782308 |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| StanFromIreland | https://github.com/StanFromIreland |
|
May 26, 2026
| https://github.com/python/cpython/pull/139368#ref-commit-8615892 |
|
| https://github.com/picnixz |
|
| https://github.com/StanFromIreland |
| [3.14] | https://github.com/StanFromIreland/cpython/commit/8615892f32a319bd5dcba052b7f4bf90a6393765 |
| pythongh-90949 | https://github.com/python/cpython/issues/90949 |
| : expose Expat API to tune exponential expansion… | https://github.com/StanFromIreland/cpython/commit/8615892f32a319bd5dcba052b7f4bf90a6393765 |
| 8615892 | https://github.com/StanFromIreland/cpython/commit/8615892f32a319bd5dcba052b7f4bf90a6393765 |
| pythonGH-139368 | https://github.com/python/cpython/pull/139368 |
| f04bea4 | https://github.com/StanFromIreland/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| https://en.wikipedia.org/wiki/Billion_laughs_attack | https://en.wikipedia.org/wiki/Billion_laughs_attack |
| 6661123 | https://github.com/StanFromIreland/cpython/commit/666112376d574c7802646ee1df6244062671cd61 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
| May 26, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4548663828 |
| GH-150496 | https://github.com/python/cpython/pull/150496 |
| 3.14 branch | https://github.com/python/cpython/tree/3.14 |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
needs backport to 3.14
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.14%22 |
| May 26, 2026 | https://github.com/python/cpython/pull/139368#event-25985798921 |
| https://github.com/apps/coderabbitai |
| coderabbitai | https://github.com/apps/coderabbitai |
|
Jun 3, 2026
| https://github.com/python/cpython/pull/139368#ref-pullrequest-4575930120 |
|
feat: add docx redline script with style tracking
arthrod/html-to-docx2#470
| https://github.com/arthrod/html-to-docx2/pull/470 |
| StanFromIreland | https://github.com/StanFromIreland |
|
Jun 9, 2026
| https://github.com/python/cpython/pull/139368#ref-commit-c078637 |
|
| https://github.com/StanFromIreland |
|
| https://github.com/picnixz |
| [3.14] | https://github.com/python/cpython/commit/c078637e8642783d90b33c6b983fa15ff29c24d6 |
| gh-90949 | https://github.com/python/cpython/issues/90949 |
| : expose Expat API to tune exponential expansion prote… | https://github.com/python/cpython/commit/c078637e8642783d90b33c6b983fa15ff29c24d6 |
| c078637 | https://github.com/python/cpython/commit/c078637e8642783d90b33c6b983fa15ff29c24d6 |
| GH-139368 | https://github.com/python/cpython/pull/139368 |
| #150496 | https://github.com/python/cpython/pull/150496 |
| f04bea4 | https://github.com/python/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| https://en.wikipedia.org/wiki/Billion_laughs_attack | https://en.wikipedia.org/wiki/Billion_laughs_attack |
| 6661123 | https://github.com/python/cpython/commit/666112376d574c7802646ee1df6244062671cd61 |
| https://github.com/StanFromIreland |
| StanFromIreland | https://github.com/StanFromIreland |
|
needs backport to 3.13
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.13%22 |
| Jun 9, 2026 | https://github.com/python/cpython/pull/139368#event-26523335852 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
| Jun 9, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4660137343 |
| GH-151151 | https://github.com/python/cpython/pull/151151 |
| 3.13 branch | https://github.com/python/cpython/tree/3.13 |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| StanFromIreland | https://github.com/StanFromIreland |
|
Jun 9, 2026
| https://github.com/python/cpython/pull/139368#ref-commit-19bc391 |
|
| https://github.com/StanFromIreland |
|
| https://github.com/picnixz |
| [3.13] | https://github.com/python/cpython/commit/19bc39127e5c916c42c54487a1ae68be76582f50 |
| gh-90949 | https://github.com/python/cpython/issues/90949 |
| : expose Expat API to tune exponential expansion prote… | https://github.com/python/cpython/commit/19bc39127e5c916c42c54487a1ae68be76582f50 |
| 19bc391 | https://github.com/python/cpython/commit/19bc39127e5c916c42c54487a1ae68be76582f50 |
| GH-139368 | https://github.com/python/cpython/pull/139368 |
| f04bea4 | https://github.com/python/cpython/commit/f04bea44c37793561d753dd4ca6e7cd658137553 |
| https://en.wikipedia.org/wiki/Billion_laughs_attack | https://en.wikipedia.org/wiki/Billion_laughs_attack |
| 6661123 | https://github.com/python/cpython/commit/666112376d574c7802646ee1df6244062671cd61 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
| Jun 12, 2026 | https://github.com/python/cpython/pull/139368#issuecomment-4691627404 |
| GH-151401 | https://github.com/python/cpython/pull/151401 |
| 3.12 branch | https://github.com/python/cpython/tree/3.12 |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
| https://github.com/apps/bedevere-app |
| bedevere-app | https://github.com/apps/bedevere-app |
|
needs backport to 3.12
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.12%22 |
| Jun 12, 2026 | https://github.com/python/cpython/pull/139368#event-26676769713 |
| https://github.co/hiddenchars |
| https://github.com/python/cpython/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fpython%2Fcpython%2Fpull%2F139368 |
|
| https://github.com/StanFromIreland |
|
StanFromIreland
| https://github.com/StanFromIreland |
|
| https://github.com/python/cpython/pull/139368/files/3ec2ebd647d04c8ae75470d9cb5024b4dfd31644 |
|
| https://github.com/gpshead |
|
gpshead
| https://github.com/gpshead |
|
| https://github.com/python/cpython/pull/139368/files/6c2eab775d5be4e2a53362f2fb34bc893dd1a39a |
|
| https://github.com/AA-Turner |
|
AA-Turner
| https://github.com/AA-Turner |
|
| https://github.com/hartwork |
|
hartwork
| https://github.com/hartwork |
|
| https://github.com/python/cpython/pull/139368/files/6c2eab775d5be4e2a53362f2fb34bc893dd1a39a |
|
| https://github.com/picnixz |
|
picnixz
| https://github.com/picnixz |
|
needs backport to 3.10
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.10%22 |
|
needs backport to 3.11
| https://github.com/python/cpython/issues?q=state%3Aopen%20label%3A%22needs%20backport%20to%203.11%22 |
| Please reload this page | https://github.com/python/cpython/pull/139368 |
|
| https://github.com/picnixz |
|
| https://github.com/hartwork |
|
| https://github.com/StanFromIreland |
|
| https://github.com/gpshead |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |