- CVE-2026-0672: http.cookies: reject control characters in Morsel keys, values and parameters so they cannot inject extra header lines - CVE-2026-4224: pyexpat: guard the recursion in conv_content_model() so a deeply nested DTD content model raises RecursionError instead of overflowing the C stack - CVE-2026-11940: tarfile: re-filter the member used for the hard-link extraction fallback so a deeper symlink cannot be recreated outside the destination - CVE-2026-11972: tarfile: stop _Stream.seek() at end of data so a truncated stream raises ReadError instead of looping forever - CVE-2026-3644: http.cookies: reject control characters passed through Morsel.update(), |=, pickling and js_output() - CVE-2026-0864: configparser: normalize CR, CRLF and LF line endings in written values so a value cannot inject new sections or options - CVE-2026-9669: bz2: refuse to reuse a BZ2Decompressor after a decompression error instead of resuming from an invalid internal state - CVE-2026-15308: html.parser: buffer incremental feed() input so unterminated markup fed in small chunks is no longer parsed in quadratic time - CVE-2026-82049: tarfile: resolve the hard link target before linking so that, with the data filter, a hard link to a symlink cannot recreate the symlink outside the destination - CVE-2026-7210: seed the libexpat parser with 16 bytes of entropy via XML_SetHashSalt16Bytes (bound as a weak symbol; falls back to the legacy XML_SetHashSalt when unavailable), widening the hash salt from 8 to 16 bytes; with PYTHONHASHSEED=0 the zero hash secret now also reaches libexpat