Approved changes feed: RSS · Atom

cpe:2.3:a:python:python:3.15.0:alpha4:*:*:*:*:*:*

part: a version: 3.15.0 update: alpha4

VendorPython (b57ad93a-6195-5192-9423-6cfad6044a8b)
ProductPython (fc328eef-0a85-5ddb-b629-b8866ec518c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python purl2cpe 2026-06-01 10:16:29.363786
pkg:github/python/cpython purl2cpe 2026-06-01 10:16:29.363787
pkg:python/python purl2cpe 2026-06-01 10:16:29.363789
pkg:rpm/opensuse/python purl2cpe 2026-06-01 10:16:29.363790

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4519 vulnerable 2026-06-03 15:26:25.614895 webbrowser.open() allows leading dashes in URLs
The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().
Published: 2026-03-20T15:08:32.576Z
Updated: 2026-04-13T21:47:40.137Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.