Repository navigation
Commit 761b17e
[CVE-2026-18503] Fix quadratic time in csv.Sniffer for quoted fields
The patch fixes a quadratic time complexity Denial of Service
vulnerability in csv.Sniffer.sniff() when processing samples with quoted
fields.
Fixes: bsc#1274683 (CVE-2026-18503)
Fixes: gh#python#98820
From-PR: gh#python/cpython!154867
Patch: CVE-2026-18503-csv-sniffer-quadratic-time.patch1 parent 8c59ffb commit 761b17e
3 files changed
Lines changed: 20 additions & 5 deletions
File tree
- Lib
- test
- Misc/NEWS.d/next/Library
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
214 | 214 | | |
215 | 215 | | |
216 | 216 | | |
| 217 | + | |
| 218 | + | |
| 219 | + | |
| 220 | + | |
| 221 | + | |
| 222 | + | |
217 | 223 | | |
218 | | - | |
219 | | - | |
220 | | - | |
221 | | - | |
222 | | - | |
| 224 | + | |
| 225 | + | |
| 226 | + | |
| 227 | + | |
| 228 | + | |
223 | 229 | | |
224 | 230 | | |
225 | 231 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1199 | 1199 | | |
1200 | 1200 | | |
1201 | 1201 | | |
| 1202 | + | |
| 1203 | + | |
| 1204 | + | |
| 1205 | + | |
| 1206 | + | |
| 1207 | + | |
| 1208 | + | |
1202 | 1209 | | |
1203 | 1210 | | |
1204 | 1211 | | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
0 commit comments