← All credits

Seth Larson (https://github.com/sethmlarson)

10 vulnerability records and advisories credit this contributor.

stringprep.map_table_b2() deviates from RFC 3454 Table B.2

Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations

Configuration Injection via Carriage Return (\r) in write() method

Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()

tarfile.data_filter path traversal bypass allows writing outside the extraction directory

Tarfile.extract() doesn't fully respect filter parameter

Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes

Potential DoS via quadratic complexity in unicodedata.normalize()

shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs

BaseCookie.js_output() does not neutralize embedded characters