CPython

RunSybil says a CPython memory bug lets model chat templates escape Jinja sandboxes; Python's security team does not consider the demonstrated escape a CPython vulnerability. The crash fix shipped in 3.13.16, 3.14.8 and 3.15.0 release candidate 2.

Sources on four 2026 changes show four notice models: a published Node.js calendar, Microsoft's 12-month minimum for ASP.NET Core 2.3, a Python Steering Council window for the JIT, and Kubernetes version targets.

The authors of PEP 836 withdrew it on October 19; Brett Cannon wrote that the JIT work stops in CPython's repo, after the Steering Council's June six-month condition for keeping it in main.

Python 3.16.0a1, released October 13, 2026, is the first of seven planned alphas; the draft What's New adds re set operations and \p{...} escapes and removes asyncio's event loop policy classes.

Python.org lists 3.15.0 as the stable release dated Oct. 9, 2026, with explicit lazy imports, new frozendict and sentinel built-in types, and UTF-8 as the default encoding.

Python 3.14.8, 3.13.16, 3.12.15, 3.11.17 and 3.10.22 fix CVEs in tarfile, ssl, zipfile and urllib; 3.10 reaches end of life with its final release.

At RustConf in Montreal, Rust's programming manager outlined CPython's scaled-back plan to add an optional internal Rust API in Python 3.16, along with unresolved technical hurdles.

CPython added riscv64-unknown-linux-gnu to PEP 11 as a Tier 3 platform, following months of community testing on RISE Project hardware.

Python 3.15.0rc1 shipped August 4 with the feature set frozen and no further ABI changes allowed, as the release team targets an October 1 final.

Python's core developers filed PEP 836, setting performance and compatibility bars for CPython's JIT compiler after the Steering Council gave the project six months to justify staying in the codebase.

Python's fifth 3.14 maintenance release, shipped May 10, restores the generational garbage collector from 3.13 after operators saw memory regressions up to 5x; the revert also reaches into Python 3.15.

The Rust for CPython project has achieved cross-platform builds in CI and shifted its target from Python 3.15 to 3.16, setting a July deadline to submit a formal Python Enhancement Proposal that would make Rust a build-time dependency of the reference interpreter.