AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L

CWE-88

https://access.redhat.com/errata/RHSA-2026:10065

https://access.redhat.com/errata/RHSA-2026:10101

https://access.redhat.com/errata/RHSA-2026:10102

https://access.redhat.com/errata/RHSA-2026:10111

https://access.redhat.com/errata/RHSA-2026:10140

https://access.redhat.com/errata/RHSA-2026:10141

https://access.redhat.com/errata/RHSA-2026:13812

https://access.redhat.com/errata/RHSA-2026:16008

https://access.redhat.com/errata/RHSA-2026:16009

https://access.redhat.com/errata/RHSA-2026:16030

https://access.redhat.com/errata/RHSA-2026:16174

https://access.redhat.com/errata/RHSA-2026:19019

https://access.redhat.com/errata/RHSA-2026:19064

https://access.redhat.com/errata/RHSA-2026:19175

https://access.redhat.com/errata/RHSA-2026:19176

https://access.redhat.com/errata/RHSA-2026:19177

https://access.redhat.com/errata/RHSA-2026:19216

https://access.redhat.com/errata/RHSA-2026:19724

https://access.redhat.com/errata/RHSA-2026:19725

https://access.redhat.com/errata/RHSA-2026:21275

https://access.redhat.com/errata/RHSA-2026:25096

https://access.redhat.com/errata/RHSA-2026:6016

https://access.redhat.com/errata/RHSA-2026:6035

https://access.redhat.com/errata/RHSA-2026:6256

https://access.redhat.com/errata/RHSA-2026:6281

https://access.redhat.com/errata/RHSA-2026:6283

https://access.redhat.com/errata/RHSA-2026:6285

https://access.redhat.com/errata/RHSA-2026:6286

https://access.redhat.com/errata/RHSA-2026:6473

https://access.redhat.com/errata/RHSA-2026:6766

https://access.redhat.com/errata/RHSA-2026:7010

https://access.redhat.com/errata/RHSA-2026:7244

https://access.redhat.com/errata/RHSA-2026:7329

https://access.redhat.com/errata/RHSA-2026:7335

https://access.redhat.com/errata/RHSA-2026:7443

https://access.redhat.com/errata/RHSA-2026:7661

https://access.redhat.com/errata/RHSA-2026:8746

https://access.redhat.com/errata/RHSA-2026:8747

https://access.redhat.com/errata/RHSA-2026:8748

https://access.redhat.com/errata/RHSA-2026:9042

https://access.redhat.com/errata/RHSA-2026:9260

https://access.redhat.com/errata/RHSA-2026:9261

https://access.redhat.com/errata/RHSA-2026:9262

https://access.redhat.com/errata/RHSA-2026:9289

https://access.redhat.com/errata/RHSA-2026:9354

https://access.redhat.com/errata/RHSA-2026:9386

https://access.redhat.com/errata/RHSA-2026:9387

https://access.redhat.com/errata/RHSA-2026:9591

https://access.redhat.com/errata/RHSA-2026:9614

https://access.redhat.com/errata/RHSA-2026:9621

https://access.redhat.com/errata/RHSA-2026:9705

https://access.redhat.com/errata/RHSA-2026:9745

https://access.redhat.com/security/cve/CVE-2026-4519

https://bugzilla.redhat.com/show_bug.cgi?id=2449649

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4519.json

[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)","defaultStatus":"affected","cpes":["cpe:/o:redhat:rhel_els:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)","defaultStatus":"affected","cpes":["cpe:/o:redhat:rhel_els:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux Server (v. 7 ELS)","defaultStatus":"affected","cpes":["cpe:/o:redhat:rhel_els:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux Server Optional (v. 7 ELS)","defaultStatus":"affected","cpes":["cpe:/o:redhat:rhel_els:7"]},{"vendor":"Red Hat","product":"Middleware Containers for OpenShift","defaultStatus":"affected","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AppStream EUS (v. 10.0)","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AppStream (v. 10)","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10.1","cpe:/o:redhat:enterprise_linux:10.2"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AppStream (v. 8)","defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AppStream AUS (v. 8.2)","defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_aus:8.2::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AppStream AUS (v.8.4)","defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)","defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AppStream AUS (v.8.6)","defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AppStream E4S (v.8.6)","defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_e4s:8.6::

{"timestamp":"2026-03-25T14:30:47.809505Z","id":"CVE-2026-4519","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Python Software Foundation","product":"CPython","defaultStatus":"unaffected","modules":["webbrowser"],"repo":"https://github.com/python/cpython","versions":[{"version":"0","lessThan":"3.13.13","versionType":"python","status":"affected"},{"version":"3.14.0","lessThan":"3.14.4","versionType":"python","status":"affected"},{"version":"3.15.0a1","lessThan":"3.15.0a8","versionType":"python","status":"affected"}]}]

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

OR
          *cpe:2.3:a:python:python:3.15.0:alpha1:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.15.0:alpha2:*:*:*:*:*:*
          *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions up to (excluding) 3.13.13
          *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.14.0 up to (excluding) 3.14.4
          *cpe:2.3:a:python:python:3.15.0:alpha3:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.15.0:alpha4:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.15.0:alpha5:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.15.0:alpha6:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.15.0:alpha7:*:*:*:*:*:*

CVE: http://www.openwall.com/lists/oss-security/2026/03/20/1 Types: Mailing List, Third Party Advisory

Python Software Foundation: https://github.com/python/cpython/commit/3681d47a440865aead912a054d4599087b4270dd Types: Patch

Python Software Foundation: https://github.com/python/cpython/commit/43fe06b96f6a6cf5cfd5bdab20b8649374956866 Types: Patch

Python Software Foundation: https://github.com/python/cpython/commit/591ed890270c5697b013bf637029fb3e6cd2d73e Types: Patch

Python Software Foundation: https://github.com/python/cpython/commit/594b5a05dc9913880ac92eded440defbf32a28d1 Types: Patch

Python Software Foundation: https://github.com/python/cpython/commit/82a24a4442312bdcfc4c799885e8b3e00990f02b Types: Patch

Python Software Foundation: https://github.com/python/cpython/commit/89bfb8e5ed3c7caa241028f1a4eac5f6275a46a4 Types: Patch

Python Software Foundation: https://github.com/python/cpython/commit/9669a912a0e329c094e992204d6bdb8787024d76 Types: Patch

Python Software Foundation: https://github.com/python/cpython/commit/96fc5048605863c7b6fd6289643feb0e97edd96c Types: Patch

Python Software Foundation: https://github.com/python/cpython/commit/ad4d5ba32af4d80b0dfa2ba9d8203bfb219e60a5 Types: Patch

Python Software Foundation: https://github.com/python/cpython/commit/cbba6119391112aba9c5aebf7b94aea447922c48 Types: Patch

Python Software Foundation: https://github.com/python/cpython/commit/cc023511238ad93ecc8796157c6f9139a2bb2932 Types: Patch

Python Software Foundation: https://github.com/python/cpython/commit/ceac1efc66516ac387eef2c9a0ce671895b44f03 Types: Patch

Python Software Foundation: https://github.com/python/cpython/issues/143930 Types: Issue Tracking, Patch

Python Software Foundation: https://github.com/python/cpython/pull/143931 Types: Issue Tracking, Patch

Python Software Foundation: https://mail.python.org/archives/list/[email protected]/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/ Types: Vendor Advisory

https://github.com/python/cpython/commit/3681d47a440865aead912a054d4599087b4270dd

https://github.com/python/cpython/commit/591ed890270c5697b013bf637029fb3e6cd2d73e

https://github.com/python/cpython/commit/594b5a05dc9913880ac92eded440defbf32a28d1

https://github.com/python/cpython/commit/89bfb8e5ed3c7caa241028f1a4eac5f6275a46a4

https://github.com/python/cpython/commit/96fc5048605863c7b6fd6289643feb0e97edd96c

https://github.com/python/cpython/commit/cc023511238ad93ecc8796157c6f9139a2bb2932

https://github.com/python/cpython/commit/cbba6119391112aba9c5aebf7b94aea447922c48

CWE-20

https://github.com/python/cpython/commit/43fe06b96f6a6cf5cfd5bdab20b8649374956866

https://github.com/python/cpython/commit/82a24a4442312bdcfc4c799885e8b3e00990f02b

https://github.com/python/cpython/commit/9669a912a0e329c094e992204d6bdb8787024d76

https://github.com/python/cpython/commit/ad4d5ba32af4d80b0dfa2ba9d8203bfb219e60a5

https://github.com/python/cpython/commit/ceac1efc66516ac387eef2c9a0ce671895b44f03

http://www.openwall.com/lists/oss-security/2026/03/20/1

AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

The webbrowser.open() API would accept leading dashes in the URL which 
could be handled as command line options for certain web browsers. New 
behavior rejects leading dashes. Users are recommended to sanitize URLs 
prior to passing to webbrowser.open().

AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

https://github.com/python/cpython/issues/143930

https://github.com/python/cpython/pull/143931

https://mail.python.org/archives/list/[email protected]/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/