| Severity |
|
| Type |
| - |
Unknown |
| + |
Denial of service |
|
| Description |
| + |
There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode() call in a try-except catching the DecodeError. |
|
| References |
| + |
https://github.com/python/cpython/issues/133767 |
| + |
https://github.com/python/cpython/pull/129648 |
| + |
http://www.openwall.com/lists/oss-security/2025/05/16/4 |
| + |
https://mail.python.org/archives/list/security-announce@python.org/thread/L75IPBBTSCYEF56I2M4KIW353BB3AY74/ |
|