From 9d41e2a534aab460dd656ef251adaed5d2d64b93 Mon Sep 17 00:00:00 2001
From: Petr Viktorin <encukou@gmail.com>
Date: Thu, 30 Apr 2026 16:33:13 +0200
Subject: [PATCH] gh-111264: Add a note about untrusted input to tomllib docs
 (GH-146209)

Co-authored-by: Stan Ulbrych <stan@python.org>
---
 Doc/library/tomllib.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/Doc/library/tomllib.rst b/Doc/library/tomllib.rst
index 2bac968c2be..55610784362 100644
--- a/Doc/library/tomllib.rst
+++ b/Doc/library/tomllib.rst
@@ -19,6 +19,12 @@ support writing TOML.
    Added TOML 1.1.0 support.
    See the :ref:`What's New <whatsnew315-tomllib-1-1-0>` for details.
 
+.. warning::
+
+   Be cautious when parsing data from untrusted sources.
+   A malicious TOML string may cause the decoder to consume considerable
+   CPU and memory resources.
+   Limiting the size of data to be parsed is recommended.
 
 .. seealso::