[issue39503] [security] Denial of service in urllib.request.AbstractBasicAuthHandler

STINNER Victor added the comment: I added this vulnerability to the following page to track fixes in all Python supported branches: https://python-security.readthedocs.io/vuln/urllib-basic-auth-regex.html -- ___ Python tracker

[issue39503] [security] Denial of service in urllib.request.AbstractBasicAuthHandler

Change by STINNER Victor : -- keywords: +patch pull_requests: +17659 stage: -> patch review pull_request: https://github.com/python/cpython/pull/18284 ___ Python tracker ___ _

[issue39503] [security] Denial of service in urllib.request.AbstractBasicAuthHandler

New submission from STINNER Victor : Copy of an email received on the Python Security Response team, 9 days ago. I consider that it's not worth it to have an embargo on this vulnerability, so I make it public. Hi there, I believe I've found a denial-of-service (DoS) bug in urllib.request.Abs