Threats tagged 'bit-libpython-2025-0938'

The Python standard library URL parsing functions urllib.parse.urlsplit and urlparse incorrectly allowed square brackets in domain names, which is invalid per RFC 3986. Square brackets should only delimit IPv6 and IPvFuture addresses in URLs. This discrepancy can cause differential parsing between Python's URL parser and other compliant parsers.