Same digest, different files: ZIP parser differentials in uv and pip
A ZIP with one digest that expands into two different packages depending on which installer opens it.
found by Caleb Brown (Google) and Tim Hatch (Netflix)
python
Space in a token: request smuggling in mitmproxy's HTTP/1.1 parser
mitmproxy split header lines on the first colon and kept whatever came before it, whitespace included.
found by Zeyu Zhang (zeyu2001)
Python's parse_qsl treated semicolons as separators, enabling web cache poisoning
A standard-library parser that separated parameters on ';' as well as '&', and the cache poisoning that followed when the proxy in front disagreed.
found by Adam Goldschmidt (Snyk)
Late delimiters: NFKC normalization and host confusion in CPython's urlsplit
CPython's urlsplit found the host by scanning for delimiters, but IDNA normalizes the name afterwards with NFKC — and some characters only become delimiters once that happens. The first fix worked by…
found by Jonathan Birch (Microsoft) and Panayiotis Panayiotou