Upgrade bundled Expat to 2.7.5 (e.g. for the fixes to `CVE-2026-3277{6,7,8}`) · Issue #146083 · python/cpython · GitHub

python / cpython Public

• Notifications You must be signed in to change notification settings
• Fork 35.3k
• Star 74.9k

• Code
• Issues 5k+
• Pull requests 2.6k
• Actions
• Projects
• Security and quality
• Insights

Additional navigation options

Upgrade bundled Expat to 2.7.5 (e.g. for the fixes to CVE-2026-3277{6,7,8}) #146083

Copy link

Copy link

Closed

Closed

Upgrade bundled Expat to 2.7.5 (e.g. for the fixes to CVE-2026-3277{6,7,8})#146083

Copy link

Assignees

Labels

3.12only security fixesonly security fixesextension-modulesC modules in the Modules dirC modules in the Modules dirtopic-XMLtype-securityA security issueA security issue

Description

StanFromIreland

opened on Mar 17, 2026

Issue body actions

See https://blog.hartwork.org/posts/expat-2-7-5-released/ for more information on the release.

Linked PRs

• gh-146083: Upgrade bundled Expat to 2.7.5 #146085
• [3.14] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) #146603
• [3.13] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) #146604
• [3.12] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) #146605
• [3.11] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) #146607
• [3.10] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) #146608

Reactions are currently unavailable

Metadata

Metadata

Assignees

• 
  StanFromIreland

Labels

3.12only security fixesonly security fixesextension-modulesC modules in the Modules dirC modules in the Modules dirtopic-XMLtype-securityA security issueA security issue

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions