Repository navigation
pyexpat.c: Unbounded C recursion in conv_content_model causes crash (CVE 2026-4224) #145986
Description
Activity
- changed the title
[-]`pyexpat.c`: Unbounded C recursion in `conv_content_model` causes crash[/-][+]`pyexpat.c`: Unbounded C recursion in `conv_content_model` causes crash (CVE 2026-4224)[/+]on Mar 15, 2026 - added a commit that references this issue
on Mar 15, 2026 17 remaining items
- added a commit that references this issue
on Apr 11, 2026 - added 2 commits that reference this issue
on Apr 12, 2026 - added 2 commits that reference this issue
on Jul 22, 2026 - added a commit that references this issue
on Aug 4, 2026 - added a commit that references this issue
on Aug 14, 2026
Crash report
What happened?
Please see PR for more information.
CPython versions tested on:
3.10, 3.11, 3.12, 3.13, 3.14, 3.15, CPython main branch
Operating systems tested on:
Linux
Output from running 'python -VV' on the command line:
No response
Linked PRs
conv_content_modelinpyexpat.c(CVE 2026-4224) #145987conv_content_modelinpyexpat.c(CVE 2026-4224) (GH-145987) #145995conv_content_modelinpyexpat.c(CVE 2026-4224) (GH-145987) #145996conv_content_modelinpyexpat.c(CVE 2026-4224) (GH-145987) #145999conv_content_modelinpyexpat.c(CVE 2026-4224) (GH-145987) #146000conv_content_modelinpyexpat.c(CVE 2026-4224) (GH-145987) #146002