Approved changes feed: RSS · Atom

cpe:2.3:a:python:python:3.15.0:alpha3:*:*:*:*:*:*

part: a version: 3.15.0 update: alpha3

VendorPython (b57ad93a-6195-5192-9423-6cfad6044a8b)
ProductPython (fc328eef-0a85-5ddb-b629-b8866ec518c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python purl2cpe 2026-06-01 10:16:29.361906
pkg:github/python/cpython purl2cpe 2026-06-01 10:16:29.361907
pkg:python/python purl2cpe 2026-06-01 10:16:29.361908
pkg:rpm/opensuse/python purl2cpe 2026-06-01 10:16:29.361910

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4519 vulnerable 2026-06-03 15:26:25.614108 webbrowser.open() allows leading dashes in URLs
The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().
Published: 2026-03-20T15:08:32.576Z
Updated: 2026-04-13T21:47:40.137Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.