Description

sethmlarson

opened on Jan 16, 2026

Issue body actions

Linked PRs

• gh-143919: Reject control characters in http cookies #143920
• [3.14] gh-143919: Reject control characters in http cookies #144089
• [3.13] gh-143919: Reject control characters in http cookies #144090
• [3.12] gh-143919: Reject control characters in http cookies #144091
• [3.11] gh-143919: Reject control characters in http cookies #144092
• [3.10] gh-143919: Reject control characters in http cookies #144094

Activity

1. sethmlarson

   added

   type-securityA security issueA security issue

   on Jan 16, 2026
2. sethmlarson

   added a commit that references this issue on Jan 16, 2026

   pythongh-143919: Reject control characters in http.cookies.Morsel

   fdbf0c4
3. StanFromIreland

   added

   stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory

   on Jan 16, 2026
4. sethmlarson

   added a commit that references this issue on Jan 20, 2026

   gh-143919: Reject control characters in http cookies

   95746b3
5. miss-islington

   added 4 commits that reference this issue on Jan 20, 2026

   pythongh-143919: Reject control characters in http cookies

   2bb0ca8

   pythongh-143919: Reject control characters in http cookies

   19ca21e

   pythongh-143919: Reject control characters in http cookies

   9729bdf

   pythongh-143919: Reject control characters in http cookies

   c2d345e
6. sethmlarson

   added a commit that references this issue on Jan 20, 2026

   [3.10] pythongh-143919: Reject control characters in http cookies

   57c5ecd
7. hugovk

   added a commit that references this issue on Jan 23, 2026

   [3.14] gh-143919: Reject control characters in http cookies (#144089)

   712452e
8. pablogsal

   added 4 commits that reference this issue on Jan 25, 2026

   [3.10] gh-143919: Reject control characters in http cookies (#144094)

   7852d72

   [3.13] gh-143919: Reject control characters in http cookies (#144090)

   918387e

   [3.11] gh-143919: Reject control characters in http cookies (#144092)

   b1869ff

   [3.12] gh-143919: Reject control characters in http cookies (#144091)

   6270010
9. StanFromIreland

   closed this as completedon Jan 30, 2026
10. bashonly

    added 2 commits that reference this issue on Feb 6, 2026

    [cookies] Ignore cookies with control characters

    528af10

    [cookies] Ignore cookies with control characters

    8594650
11. bmwiedemann

    added a commit that references this issue on Feb 13, 2026

    Update python310 to version 3.10.19 / rev 71 via SR 1332783

    5585b8b
12. thunder-coding

    added a commit that references this issue on Feb 15, 2026

    pythongh-143919: Reject control characters in http cookies

    e0c092e
13. bashonly

    added a commit that references this issue on Feb 16, 2026

    [cookies] Ignore cookies with control characters (#15862)

    43229d1
14. bmwiedemann

    added 2 commits that reference this issue on Feb 18, 2026

    Update python312 to version 3.12.12 / rev 43 via SR 1332782

    82a6b4d

    Update python311 to version 3.11.14 / rev 63 via SR 1332828

    586ca21
15. POWERFULMOVES

    added 2 commits that reference this issue on Mar 12, 2026

    [cookies] Ignore cookies with control characters (yt-dlp#15862)

    2d58f53

    feat(pmoves-yt): make submodule authoritative runtime (#4)

    d0be5fd
16. aalsuwaidi

    added a commit that references this issue on Aug 21, 2026

    Merge upstream master (yt-dlp/yt-dlp) into fork (#1)

    31ab03e
17. mcepl

    added 2 commits that reference this issue on Sep 18, 2026

    [CVE-2026-0672] reject control characters in http cookies

    9224f3d

    [CVE-2026-0672] reject control characters in http cookies

    829e6df
18. mcepl

    added 2 commits that reference this issue on Oct 1, 2026

    [CVE-2026-0672] reject control characters in http cookies

    d00fee7

    [CVE-2026-0672] reject control characters in http cookies

    4edecec
19. icanhasmath

    added a commit that references this issue on Oct 28, 2026

    [3.10] pythongh-143919: Reject control characters in http cookies (py…

    66da1a6

Issue actions