cpython/Doc/library
Miss Islington (bot) 8f5630d729
[3.13] gh-127502: Remove XML vulnerability table (GH-135294) (#136360)
gh-127502: Remove XML vulnerability table (GH-135294)

* Remove the table
* Replace warnings with notes

Latest releases of Python 3.9-3.15 include expat 2.7.1 which is not vulnerable.

expat 2.6.0 was released in February 2024.
(cherry picked from commit cb99d99277)

Co-authored-by: Victor Stinner <vstinner@python.org>
2025-07-07 09:10:20 +00:00
..
__future__.rst
__main__.rst
_thread.rst
abc.rst [3.13] Docs: Fix some semantic usages of iterator.__iter__ (GH-130172) (GH-130543) 2025-02-26 11:02:53 +01:00
aifc.rst
allos.rst [3.13] gh-126180: Remove getopt and optparse deprecation notices (GH-128191) 2024-12-23 04:40:59 +00:00
archiving.rst
argparse.rst [3.13] Docs: Use arguments to replace args in argparse.rst (GH-135510) (GH-135867) 2025-06-23 22:59:17 +00:00
array.rst
ast.rst [3.13] gh-134733: Fix documentation for the show_empty option of ast.dump() (GH-134925) (GH-134941) 2025-05-30 19:30:26 +03:00
asynchat.rst
asyncio-api-index.rst
asyncio-dev.rst [3.13] gh-133515: fix docs for unawaited coroutines in debug mode (GH-134081) (#134094) 2025-05-16 15:38:22 +00:00
asyncio-eventloop.rst [3.13] gh-133745: Fix asyncio task factory name/context kwarg breaks (#133948) 2025-05-18 06:50:07 -07:00
asyncio-exceptions.rst
asyncio-extending.rst
asyncio-future.rst
asyncio-llapi-index.rst
asyncio-platforms.rst
asyncio-policy.rst
asyncio-protocol.rst
asyncio-queue.rst [3.13] gh-121970: Replace .. coroutine{method,function} with :async: (GH-130448) (#130465) 2025-02-22 18:00:49 +00:00
asyncio-runner.rst
asyncio-stream.rst [3.13] gh-134664: document cleanup_socket parameter in asyncio.start_unix_server (GH-134750) (#134780) 2025-05-27 14:04:29 +05:30
asyncio-subprocess.rst [3.13] gh-101100: Fix sphinx warnings in library/asyncio-subprocess.rst (GH-130994) (#131074) 2025-03-11 14:30:47 +02:00
asyncio-sync.rst [3.13] gh-121970: Replace .. coroutine{method,function} with :async: (GH-130448) (#130465) 2025-02-22 18:00:49 +00:00
asyncio-task.rst [3.13] gh-132354: document return value for asyncio.Task.cancel (GH-132374) (#132465) 2025-04-13 07:41:26 +00:00
asyncio.rst
asyncore.rst
atexit.rst
audioop.rst
audit_events.rst
base64.rst [3.13] gh-134201: Expand explanation of Base85 encodings in base64 docs (GH-134288) (#134297) 2025-05-20 00:05:26 +00:00
bdb.rst
binary.rst
binascii.rst
bisect.rst
builtins.rst
bz2.rst
calendar.rst [3.13] gh-108202: Document calendar.Calendar.firstweekday (GH-128566) (#128579) 2025-01-07 08:05:09 +00:00
cgi.rst
cgitb.rst
chunk.rst
cmath.rst [3.13] Docs: Add a single table summary for `cmath` (GH-131887) (#132179) 2025-04-06 23:42:49 +00:00
cmd.rst
cmdline.rst [3.13] gh-130160: use .. program:: directive for documenting platform CLI (GH-133335) (#133341) 2025-05-03 15:37:09 +03:00
cmdlinelibs.rst [3.13] gh-126180: Remove getopt and optparse deprecation notices (GH-128191) 2024-12-23 04:40:59 +00:00
code.rst [3.13] gh-53189: Document peculiarities of InteractiveConsole in relation to pickle (GH-123069) (GH-134329) 2025-05-20 12:17:10 +00:00
codecs.rst [3.13] gh-48181: Document codecs.charmap_build (GH-135997) (#136124) 2025-06-30 15:52:53 +02:00
codeop.rst
collections.abc.rst [3.13] gh-130159: Fix list indentation in collections.abc (GH-130165) (#130437) 2025-02-22 01:47:18 +00:00
collections.rst [3.13] gh-101100: Fix Sphinx documentation warnings in collections.rst (GH-130629) (#130779) 2025-03-03 09:57:28 +00:00
colorsys.rst
compileall.rst [3.13] gh-133503: clarify compileall -s/-p docs (GH-134756) (#134996) 2025-06-01 08:27:26 +00:00
concurrency.rst
concurrent.futures.rst
concurrent.rst
configparser.rst
constants.rst [3.13] gh-129015: Improve disambiguation between NotImplemented and NotImplementedError (GH-129562) (#130776) 2025-03-03 08:29:29 +00:00
contextlib.rst [3.13] Docs: Add a missing trailing full stop (GH-130561) (#132358) 2025-04-10 11:57:40 +00:00
contextvars.rst
copy.rst [3.13] gh-134559: Add versionadded for `object.__replace__()` (GH-134672) (#134700) 2025-05-26 10:29:53 +00:00
copyreg.rst
crypt.rst
crypto.rst
csv.rst [3.13] gh-131885: Update documented signatures for csv.{writer,reader} (GH-136085) (GH-136121) 2025-06-30 13:38:49 +00:00
ctypes.rst [3.13] gh-69011: : clarify & deduplicate ctypes.create_*_buffer docs (GH-132858) (GH-134882) 2025-05-29 13:22:33 +00:00
curses.ascii.rst
curses.panel.rst
curses.rst
custominterp.rst
dataclasses.rst [3.13] Fix presentation of dataclasses' unsafe_hash default value (GH-116532) (#135417) 2025-06-12 01:37:30 +00:00
datatypes.rst
datetime.rst [3.13] gh-132642: document how to render human-readable timedelta objects (GH-133825) (#133836) 2025-05-10 15:57:29 +00:00
dbm.rst [3.13] gh-101100: Docs: Fix some typos in the document (GH-129988) (#129997) 2025-02-11 21:37:25 +00:00
debug.rst
decimal.rst [3.13] gh-101100: Fix Sphinx warnings in library/decimal.rst (GH-134303) (#134339) 2025-05-20 17:55:23 +03:00
development.rst
devmode.rst
dialog.rst [3.13] gh-135756: Fix nonexistent parameter in tkinter docs (GH-135770) (#135777) 2025-06-20 23:35:39 +00:00
difflib.rst
dis.rst [3.13] gh-85583: Add an overview of formatted string literals (f-strings) to `str` (GH-132689) (#132767) 2025-04-21 08:55:13 +01:00
distribution.rst
distutils.rst
doctest.rst [3.13] gh-134918: Fix and improve doctest's documentation (GH-134919) (GH-134967) 2025-05-31 09:09:07 +00:00
email.charset.rst
email.compat32-message.rst
email.contentmanager.rst [3.13] gh-121542: Document trailing newline behavior in set_content() (GH-121543) (#128995) 2025-01-18 18:40:30 +00:00
email.encoders.rst
email.errors.rst [3.13] gh-101100: Fix sphinx warnings in library/email.errors.rst (GH-130774) (#130781) 2025-03-03 12:04:51 +02:00
email.examples.rst
email.generator.rst
email.header.rst [3.13] Docs: Fix duplicate word typos (GH-135958) (GH-136008) 2025-06-26 20:13:46 -04:00
email.headerregistry.rst
email.iterators.rst
email.message.rst
email.mime.rst
email.parser.rst
email.policy.rst [3.13] Docs: fix MessageDefect references in email.policy docs (GH-128468) (#128526) 2025-01-05 22:04:39 +00:00
email.rst
email.utils.rst
ensurepip.rst [3.13] gh-130160: use .. program:: directive for documenting ensurepip CLI (gh-130253) (gh-130259) 2025-02-18 12:51:33 +00:00
enum.rst [3.13] gh-112328: Make EnumDict usable on its own and document it (GH-123669) (GH-128142) 2024-12-24 10:50:23 -08:00
errno.rst [3.13] gh-85046: Document errno constants (GH-126420) (#129383) 2025-01-28 00:19:06 +00:00
exceptions.rst [3.13] Docs: Fix duplicate word typos (GH-135958) (GH-136008) 2025-06-26 20:13:46 -04:00
faulthandler.rst
fcntl.rst [3.13] gh-132742: Update documentation for the fcntl module (GH-132765) (GH-132832) 2025-04-23 21:08:46 +03:00
filecmp.rst [3.13] Use roles :data: and :const: for referencing module variables (GH-129507) (GH-129649) 2025-02-04 14:25:18 +00:00
fileformats.rst
fileinput.rst
filesys.rst [3.13] gh-126180: Remove getopt and optparse deprecation notices (GH-128191) 2024-12-23 04:40:59 +00:00
fnmatch.rst [3.13] gh-123345: improve fnmatch docs (GH-123346) (#128776) 2025-01-13 10:35:26 +00:00
fractions.rst [3.13] gh-136169: Update parameter name in fractions.from_float method (GH-136172) (#136175) 2025-07-01 13:30:49 +00:00
frameworks.rst
ftplib.rst
functional.rst
functions.rst [3.13] Docs: Fix indentation in slice class of functions.rst (GH-134393) (GH-135949) 2025-06-25 17:45:57 +00:00
functools.rst
gc.rst
getopt.rst [3.13] gh-126180: Remove getopt and optparse deprecation notices (GH-128191) 2024-12-23 04:40:59 +00:00
getpass.rst
gettext.rst
glob.rst
graphlib.rst
grp.rst
gzip.rst [3.13] gh-98347: Add links to python-isal in the documentation (GH-98637) (#132894) 2025-04-25 03:09:58 +01:00
hashlib-blake2-tree.png
hashlib.rst Python 3.13.4 2025-06-03 17:34:24 +02:00
heapq.rst
hmac.rst
html.entities.rst
html.parser.rst [3.13] gh-131535: Fix stale example in html.parser docs, make examples doctests (GH-131551) (GH-133587) 2025-05-07 20:33:23 +03:00
html.rst
http.client.rst
http.cookiejar.rst [3.13] gh-101100: Fix references in http.cookiejar docs (GH-136238) (GH-136317) 2025-07-05 13:35:52 +00:00
http.cookies.rst [3.13] link to the correct output method in documentation (GH-127857) (#127900) 2024-12-13 15:07:46 +05:30
http.rst
http.server.rst [3.13] gh-117026: Remove outdated sentence in SimpleHTTPRequestHandler docs (GH-117027) (GH-134108) 2025-05-16 22:24:05 +03:00
i18n.rst
idle.rst [3.13] gh-130160: use .. program:: directive for documenting idle CLI (GH-130278) (#130494) 2025-02-23 22:58:28 -05:00
imaplib.rst
imghdr.rst
imp.rst
importlib.metadata.rst [3.13] Fix typo in importlib.metadata.rst (gh-131596) (#131630) 2025-03-27 15:42:47 +02:00
importlib.resources.abc.rst [3.13] gh-110631: Fix some incorrect indents in the documentation (GH-129312) (#134420) 2025-05-21 14:00:13 +00:00
importlib.resources.rst
importlib.rst [3.13] GH-121970: Replace custom abstract method directive with the `:abstract:` option (#129311) (#130439) 2025-02-22 02:04:54 +00:00
index.rst [3.13] gh-126180: Remove getopt and optparse deprecation notices (GH-128191) 2024-12-23 04:40:59 +00:00
inspect.rst
internet.rst
intro.rst
io.rst [3.13] gh-80050: Update BufferedReader.read docs around non-blocking (GH-130653) (#134445) 2025-05-21 17:07:03 +00:00
ipaddress.rst
ipc.rst
itertools.rst [3.13] Minor doc edit: Make multinomial() the first math example (gh-132697) (gh-132698) 2025-04-18 17:47:25 +00:00
json.rst [3.13] gh-134150: Clarify distinction between JSON and Python objects (GH-134154) (#134167) 2025-05-18 01:53:37 +00:00
kde_example.png
keyword.rst
language.rst
linecache.rst
locale.rst
logging.config.rst [3.13] Docs: Fix markups for emphasis (GH-135598) (GH-135686) 2025-06-18 17:44:43 +00:00
logging.handlers.rst [3.13] gh-91555: add warning to docs about possibility of deadlock/infinite recursion (GH-135954) (GH-135989) 2025-06-26 15:26:11 +01:00
logging.rst [3.13] gh-127805: Clarify Formatter initialization in logging.rst. (GH-127850) (#130392) 2025-02-24 07:23:16 +02:00
lzma.rst
mailbox.rst [3.13] gh-121529: Document from_ parameter in _mboxMMDF public methods (GH-121530) (#131623) 2025-03-23 12:17:37 +00:00
mailcap.rst
markup.rst
marshal.rst
math.rst [3.13] gh-136122: Fix video link for math.tau documentation (GH-136129) (#136132) 2025-06-30 14:49:35 +00:00
mimetypes.rst
mm.rst
mmap.rst [3.13] Docs: Fix duplicate word typos (GH-135958) (GH-136008) 2025-06-26 20:13:46 -04:00
modulefinder.rst
modules.rst
msilib.rst
msvcrt.rst
multiprocessing.rst [3.13] gh-109070: Document that get_context in multiprocessing have side effect (GH-136341) (GH-136344) 2025-07-06 18:32:15 +00:00
multiprocessing.shared_memory.rst
netdata.rst
netrc.rst [3.13] gh-135815: skip netrc security checks if os.getuid is missing (GH-135816) (#135826) 2025-06-22 20:12:20 +00:00
nis.rst
nntplib.rst
numbers.rst [3.13] GH-121970: Replace custom abstract method directive with the `:abstract:` option (#129311) (#130439) 2025-02-22 02:04:54 +00:00
numeric.rst
operator.rst
optparse.rst [3.13] gh-126180: Remove getopt and optparse deprecation notices (GH-128191) 2024-12-23 04:40:59 +00:00
os.path.rst Python 3.13.4 2025-06-03 17:34:24 +02:00
os.rst [3.13] gh-127541: Update os.walk example (GH-127765) (GH-131869) 2025-03-29 06:49:15 +00:00
ossaudiodev.rst
pathlib-inheritance.png
pathlib-inheritance.svg
pathlib.rst [3.13] gh-133286: add explanation about seq for pathlib Pattern Language (GH-133340) (#134106) 2025-05-16 20:20:53 +01:00
pdb.rst [3.13] gh-106670: Fix a typo in doc of pdb's exceptions command (GH-132277) (#132279) 2025-04-08 21:28:35 +00:00
persistence.rst
pickle.rst
pickletools.rst
pipes.rst
pkgutil.rst [3.13] Docs: Emphasize parameter name in pkgutil.iter_importers (GH-135597) (GH-135711) 2025-06-19 13:04:46 +00:00
platform.rst [3.13] gh-130160: use .. program:: directive for documenting platform CLI (GH-133335) (#133341) 2025-05-03 15:37:09 +03:00
plistlib.rst [3.13] gh-101100: Fix sphinx warnings in library/plistlib.rst (GH-132422) (#132485) 2025-04-13 18:41:56 +00:00
poplib.rst
posix.rst
pprint.rst
profile.rst [3.13] gh-130160: use .. program:: directive for documenting cProfile CLI (GH-130314) (#130745) 2025-03-01 20:45:33 +00:00
pty.rst
pwd.rst
py_compile.rst
pyclbr.rst
pydoc.rst
pyexpat.rst [3.13] gh-127502: Remove XML vulnerability table (GH-135294) (#136360) 2025-07-07 09:10:20 +00:00
python.rst
queue.rst
quopri.rst
random.rst
re.rst [3.13] gh-122055: Clarify documentation for empty matches in RE (GH-133169) (GH-134218) 2025-05-19 16:49:29 +03:00
readline.rst [3.13] gh-101100: Fix sphinx warnings in readline.rst (GH-130300) (#130346) 2025-02-20 15:06:33 +02:00
removed.rst
reprlib.rst
resource.rst
rlcompleter.rst
runpy.rst
sched.rst
secrets.rst
security_warnings.rst [3.13] gh-127502: Remove XML vulnerability table (GH-135294) (#136360) 2025-07-07 09:10:20 +00:00
select.rst [3.13] Use roles :data: and :const: for referencing module variables (GH-129507) (GH-129649) 2025-02-04 14:25:18 +00:00
selectors.rst [3.13] GH-121970: Replace custom abstract method directive with the `:abstract:` option (#129311) (#130439) 2025-02-22 02:04:54 +00:00
shelve.rst
shlex.rst
shutil.rst gh-134538: Add link to shutil.rmtree example in function docs (GH-135540) 2025-06-18 21:17:42 +00:00
signal.rst [3.13] gh-110631: Fix some incorrect indents in the documentation (GH-129312) (#134420) 2025-05-21 14:00:13 +00:00
site.rst [3.13] Use roles :data: and :const: for referencing module variables (GH-129507) (GH-129649) 2025-02-04 14:25:18 +00:00
smtpd.rst
smtplib.rst [3.13] gh-101100: Docs: Fix some typos in the document (GH-129988) (#129997) 2025-02-11 21:37:25 +00:00
sndhdr.rst
socket.rst Python 3.13.4 2025-06-03 17:34:24 +02:00
socketserver.rst [3.13] Docs: Fix duplicate word typos (GH-135958) (GH-136008) 2025-06-26 20:13:46 -04:00
spwd.rst
sqlite3.rst [3.13] gh-131002: clarify how to enforce sqlite3 column types for generated fields (GH-131006) (#131385) 2025-03-18 12:09:41 +01:00
ssl.rst [3.13] Use roles :data: and :const: for referencing module variables (GH-129507) (GH-129649) 2025-02-04 14:25:18 +00:00
stat.rst
statistics.rst
stdtypes.rst [3.13] gh-106318: Add example for str.expandtabs() (GH-134525) (#135477) 2025-06-13 15:50:53 +00:00
string.rst [3.13] Docs: use boolean constants for returning boolean value (GH-133325) (GH-133761) 2025-05-09 14:19:23 +00:00
stringprep.rst
struct.rst
subprocess.rst [3.13] gh-133089: Use original timeout value for TimeoutExpired when the func subprocess.run is called with a timeout (GH-133103) (#133418) 2025-05-05 01:38:30 +00:00
sunau.rst
superseded.rst [3.13] gh-126180: Remove getopt and optparse deprecation notices (GH-128191) 2024-12-23 04:40:59 +00:00
symtable.rst
sys.monitoring.rst [3.13] Differentiate bitwise OR from the word "or" (GH-132890) (#132891) 2025-04-24 22:11:18 +00:00
sys.rst [3.13] document that sys._is_gil_enabled is CPython-specific (GH-131748) (#131760) 2025-03-26 17:44:47 +05:30
sys_path_init.rst
sysconfig.rst [3.13] gh-132726: Change the heading of sysconfig CLI section (GH-133035) (#133088) 2025-04-28 15:19:46 +00:00
syslog.rst
tabnanny.rst
tarfile.rst [3.13] Docs: Move "or" outside monospace syntax in tarfile.rst (GH-136263) (GH-136348) 2025-07-06 21:24:51 -04:00
telnetlib.rst
tempfile.rst
termios.rst
test.rst
text.rst
textwrap.rst
threading.rst [3.13] gh-124210: Add introduction to threading docs (GH-127046) (#134091) 2025-05-16 12:25:22 +00:00
time.rst [3.13] gh-63207: Update time.time documentation after GH-116822 (GH-136068) (#136139) 2025-06-30 16:16:27 +00:00
timeit.rst
tk.rst
tk_msg.png
tkinter.colorchooser.rst
tkinter.dnd.rst
tkinter.font.rst
tkinter.messagebox.rst
tkinter.rst
tkinter.scrolledtext.rst
tkinter.ttk.rst
token-list.inc [3.13] gh-130587: Add hand-written docs for non-OP tokens (GH-130588) (GH-131465) 2025-03-24 12:34:23 +00:00
token.rst [3.13] gh-135263: Fix typo in token.NAME documentation (GH-135275) (#135281) 2025-06-08 17:55:12 -04:00
tokenize.rst [3.13] gh-129020: Remove ambiguous sentence from tokenize.untokenize docs (GH-129021) (#129035) 2025-01-20 00:11:27 +00:00
tomllib.rst
trace.rst
traceback.rst [3.13] gh-128481: indicate that the default value for FrameSummary.end_lineno changed in 3.13 (GH-130755) (#130767) 2025-03-02 17:22:48 +00:00
tracemalloc.rst
tty.rst
tulip_coro.dia
tulip_coro.png
turtle-star.pdf
turtle-star.png
turtle-star.ps
turtle.rst [3.13] Docs: delete title links in turtle.rst and typing.rst (GH-133283) (#133293) 2025-05-02 13:24:12 +01:00
types.rst
typing.rst [3.13] gh-130117: Document why nested Union, Literal, and Annotated types referenced through a type alias are not flattened (GH-130119) (#133488) 2025-05-06 02:13:22 +00:00
unicodedata.rst
unittest.mock-examples.rst
unittest.mock.rst [3.13] gh-133413: Fix references to removed Request.has_data (GH-133414) (GH-133946) 2025-05-12 18:25:25 +00:00
unittest.rst [3.13] Docs: fix spelling of "test case" in unittest documentation (GH-134137) (#134139) 2025-05-17 14:03:58 +02:00
unix.rst
urllib.error.rst
urllib.parse.rst
urllib.request.rst [3.13] gh-133413: Fix references to removed Request.has_data (GH-133414) (GH-133946) 2025-05-12 18:25:25 +00:00
urllib.robotparser.rst
urllib.rst
uu.rst
uuid.rst [3.13] gh-130461: Remove unnecessary usages of .. index:: directives in Doc/library/uuid.rst (#130526) (#130548) 2025-02-25 15:24:46 +02:00
venv.rst
warnings.rst
wave.rst
weakref.rst
webbrowser.rst [3.13] gh-122399: change webbrowser.rst to better describe the contents of controller object (GH-122407) (#132874) 2025-04-24 14:03:02 +00:00
windows.rst
winreg.rst
winsound.rst [3.13] gh-131327: Document winsound.SND_APPLICATION (GH-131328) (#131330) 2025-03-16 15:52:48 +00:00
wsgiref.rst [3.13] gh-127522: wsgiref: indicate that start_response objects should follow a specific protocol (GH-127525) (GH-130504) 2025-02-24 15:08:07 +01:00
xdrlib.rst
xml.dom.minidom.rst [3.13] gh-127502: Remove XML vulnerability table (GH-135294) (#136360) 2025-07-07 09:10:20 +00:00
xml.dom.pulldom.rst [3.13] gh-127502: Remove XML vulnerability table (GH-135294) (#136360) 2025-07-07 09:10:20 +00:00
xml.dom.rst
xml.etree.elementtree.rst [3.13] gh-127502: Remove XML vulnerability table (GH-135294) (#136360) 2025-07-07 09:10:20 +00:00
xml.rst [3.13] gh-127502: Remove XML vulnerability table (GH-135294) (#136360) 2025-07-07 09:10:20 +00:00
xml.sax.handler.rst
xml.sax.reader.rst
xml.sax.rst [3.13] gh-127502: Remove XML vulnerability table (GH-135294) (#136360) 2025-07-07 09:10:20 +00:00
xml.sax.utils.rst
xmlrpc.client.rst [3.13] gh-127502: Remove XML vulnerability table (GH-135294) (#136360) 2025-07-07 09:10:20 +00:00
xmlrpc.rst [3.13] gh-101100: Fix sphinx warnings in whatsnew/3.0.rst (GH-127662) (#127783) 2024-12-10 10:45:30 +00:00
xmlrpc.server.rst [3.13] gh-127502: Remove XML vulnerability table (GH-135294) (#136360) 2025-07-07 09:10:20 +00:00
zipapp.rst
zipfile.rst [3.13] gh-123726: Document caveats of zipfile.Path around name sanitization (GH-130537) (#130986) 2025-03-08 21:43:12 +00:00
zipimport.rst
zlib.rst [3.13] gh-98347: Add links to python-isal in the documentation (GH-98637) (#132894) 2025-04-25 03:09:58 +01:00
zoneinfo.rst [3.13] gh-135273: Unify ZoneInfo.from_file signatures (GH-135274) (#135715) 2025-06-19 15:10:54 +00:00