cpython/Misc/NEWS.d/next/Security/2026-03-14-17-31-39.gh-issue-145986.ifSSr8.rst at d013b14aec4fce7d4619a8fb4fbdb241d529456e · python/cpython · GitHub

4 lines (4 loc) · 265 Bytes

:mod:`xml.parsers.expat`: Fixed a crash caused by unbounded C recursion when converting deeply nested XML content models with :meth:`~xml.parsers.expat.xmlparser.ElementDeclHandler`. This addresses CVE-2026-4224.