We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled SSRF if a URL is processed by more than one URL parser.
Reserved 2024-11-12 | Published 2024-11-12 | Updated 2025-04-11 | Assigner PSFzer0yu (IPASSLab && ZGC Lab)
github.com/...ommit/29f348e232e82938ba2165843c448c2b291504c5
github.com/python/cpython/pull/103849
github.com/python/cpython/issues/103848
mail.python.org/.../thread/XPWB6XVZ5G5KGEI63M4AWLIEUF5BPH4T/
github.com/...ommit/b2171a2fd41416cf68afd67460578631d755a550
github.com/...ommit/634ded45545ce8cbd6fd5d49785613dd7fa9b89e
github.com/...ommit/ddca2953191c67a12b1f19d6bca41016c6ae7132
Support options