CVE-2026-4519

Katalog CVE

CVSS 3.3 · Low EPSS 0,39%

Kerentanan Improper Input Validation pada python. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().

Rincian

Terbit di NVD

20 Maret 2026

Terakhir diubah

13 Agustus 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

EPSS (30 hari)

0,39% peluang dieksploitasi; lebih tinggi dari 31,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/ advisory vendor
• https://github.com/python/cpython/commit/3681d47a440865aead912a054d4599087b4270dd patch
• https://github.com/python/cpython/commit/43fe06b96f6a6cf5cfd5bdab20b8649374956866 patch
• https://github.com/python/cpython/commit/591ed890270c5697b013bf637029fb3e6cd2d73e patch
• https://github.com/python/cpython/commit/594b5a05dc9913880ac92eded440defbf32a28d1 patch
• https://github.com/python/cpython/commit/82a24a4442312bdcfc4c799885e8b3e00990f02b patch
• https://github.com/python/cpython/commit/89bfb8e5ed3c7caa241028f1a4eac5f6275a46a4 patch
• https://github.com/python/cpython/commit/9669a912a0e329c094e992204d6bdb8787024d76 patch
• https://github.com/python/cpython/commit/96fc5048605863c7b6fd6289643feb0e97edd96c patch
• https://github.com/python/cpython/commit/ad4d5ba32af4d80b0dfa2ba9d8203bfb219e60a5 patch
• https://github.com/python/cpython/commit/cbba6119391112aba9c5aebf7b94aea447922c48 patch
• https://github.com/python/cpython/commit/cc023511238ad93ecc8796157c6f9139a2bb2932 patch
• https://github.com/python/cpython/commit/ceac1efc66516ac387eef2c9a0ce671895b44f03 patch
• https://github.com/python/cpython/issues/143930 issue tracking · patch
• https://github.com/python/cpython/pull/143931 issue tracking · patch
• http://www.openwall.com/lists/oss-security/2026/03/20/1 mailing list · advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2026:10065
• https://access.redhat.com/errata/RHSA-2026:10101
• https://access.redhat.com/errata/RHSA-2026:10102
• https://access.redhat.com/errata/RHSA-2026:10111
• https://access.redhat.com/errata/RHSA-2026:10140
• https://access.redhat.com/errata/RHSA-2026:10141
• https://access.redhat.com/errata/RHSA-2026:13812
• https://access.redhat.com/errata/RHSA-2026:16008
• https://access.redhat.com/errata/RHSA-2026:16009