Approved changes feed: RSS · Atom

cpe:2.3:a:python:python:3.15.0:alpha6:*:*:*:*:*:*

part: a version: 3.15.0 update: alpha6

VendorPython (b57ad93a-6195-5192-9423-6cfad6044a8b)
ProductPython (fc328eef-0a85-5ddb-b629-b8866ec518c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python purl2cpe 2026-06-01 10:16:29.367443
pkg:github/python/cpython purl2cpe 2026-06-01 10:16:29.367444
pkg:python/python purl2cpe 2026-06-01 10:16:29.367446
pkg:rpm/opensuse/python purl2cpe 2026-06-01 10:16:29.367447

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4519 vulnerable 2026-06-03 15:26:25.616352 webbrowser.open() allows leading dashes in URLs
The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().
Published: 2026-03-20T15:08:32.576Z
Updated: 2026-04-13T21:47:40.137Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.