|
Adding `security` as a well-known URL label and `[project.security]` table to pyproject.toml
|
|
19
|
718
|
September 6, 2026
|
|
Protecting component package names on PyPI before a project is ready to publish
|
|
11
|
582
|
August 11, 2026
|
|
Moving packaging security coordination out of the PSRT
|
|
10
|
582
|
May 26, 2026
|
|
PyPi plans for 2026?
|
|
0
|
281
|
May 15, 2026
|
|
Slopsquatting for the common good
|
|
5
|
680
|
May 7, 2026
|
|
Announcement: 2FA now required for PyPI
|
|
31
|
2755
|
March 26, 2026
|
|
Python 3.13.x SSL security changes
|
|
15
|
15609
|
February 23, 2026
|
|
Regularly disabling unused commit access to the cpython repo
|
|
8
|
1157
|
November 25, 2025
|
|
Attacks on dictionaries when the keys are integers
|
|
23
|
2550
|
August 27, 2025
|
|
Add .github repository with a SECURITY.md file?
|
|
4
|
589
|
August 17, 2025
|
|
mTLS connection with Strings/Buffers
|
|
5
|
386
|
June 24, 2025
|
|
Reviews requested for email security fixes
|
|
0
|
207
|
December 2, 2024
|
|
The Python Software Foundation has been authorized by the CVE Program as a CVE Numbering Authority (CNA)
|
|
6
|
2531
|
November 20, 2024
|
|
Securely parsing XML with expat 2.6.0 or later
|
|
0
|
183
|
August 3, 2024
|
|
Typosquatting, dependency confusion, supply chain attack, call it as you wish
|
|
12
|
1845
|
May 6, 2024
|
|
Pip must notify people that they have been compromised by a malicious package
|
|
19
|
2643
|
May 1, 2024
|
|
Trying to understand security backport policy
|
|
7
|
882
|
April 25, 2024
|
|
Pathway to requiring OpenSSL 3 or newer in CPython?
|
|
10
|
2226
|
April 17, 2024
|
|
CPython, PyPI, and many Python packages are not affected by the backdoor of xz
|
|
6
|
3731
|
April 11, 2024
|
|
PyPI Malware Observation Report Outcomes - Private Preview
|
|
0
|
1319
|
March 20, 2024
|
|
Create and distribute Software Bill-of-Materials (SBOM) for Python artifacts
|
|
29
|
6532
|
February 7, 2024
|
|
Python maillibs don't verify server certificates by default, which is documented behavior, but several open source projects failed to do this right and I like to see this fixed
|
|
13
|
2079
|
February 5, 2024
|
|
How to hide or remove sensitive data from getting exposed in memory dump?
|
|
2
|
1121
|
January 30, 2024
|
|
Announcement: 2FA Requirement for PyPI 2024-01-01
|
|
0
|
3021
|
December 11, 2023
|
|
`ssl`: changing the default `SSLContext.verify_flags`?
|
|
16
|
6357
|
November 28, 2023
|
|
How to word a warning about security uses in `urllib.parse` docs
|
|
15
|
2203
|
May 3, 2023
|
|
Using SourceRank score to warn or limit packages
|
|
17
|
1822
|
April 30, 2023
|
|
Sprint recording: Dustin Ingram on Open Source Security for CPython
|
|
3
|
674
|
October 20, 2022
|