Python 3.10.22, 3.11.17, 3.12.15, 3.13.16 and 3.14.8 Security Releases
By BIOS Founding Team
Five security releases went out together. They fix tarfile extraction-filter flaws that could write outside the destination directory, unbounded allocation in zipfile, and urllib.request credential scoping by URL scheme.
They also fix ssl and asyncio argument validation, restrict stringprep and the IDNA codec to RFC 3454 codepoints, and update bundled libexpat to 2.8.5. Python 3.10.22 is the final 3.10 release, and 3.13.16 is the last full maintenance release of 3.13.
Full details: https://blog.python.org/2026/10/python-31022-31117
More from the community
Docker Hub Security Advisory: Personal Access Token Transfer
Docker Hub's account-to-organization conversion could reassign a converted account's personal access tokens to a named new owner without rotating the secret or notifying that owner. Docker rated the issue critical.
Vue 3.6.0-rc.11
The latest release candidate adds one feature: Vapor slot content can now transition inside a VDOM Transition. It also has about 60 bug fixes, mainly in the Vapor compiler and runtime.
Python 3.15.0 Is Here
Python 3.15.0 is the stable release of the 3.15 series, built from 5,643 commits by 1,012 contributors. Headline changes are explicit lazy imports (PEP 810), a frozendict built-in (PEP 814), a sentinel built-in (PEP 6...