Reject leading dashes in webbrowser.open() #143930

Activity

1. ambv

   reopened this on Mar 24, 2026
2. frenzymadness commented on Mar 26, 2026

   

   frenzymadness

   on Mar 26, 2026

   Contributor

   More actions

   @ambv, what do you plan to change here, please? Is there any flaw in the merged fixes?
3. ambv commented on Mar 26, 2026

   

   ambv

   on Mar 26, 2026

   Contributor

   More actions

   @frenzymadness See PR

   👍React with 👍1Reacted by Lumír 'Frenzy' Balhar
4. bmwiedemann

   added 6 commits that reference this issue on Mar 31, 2026

   Update python315 to version 3.15.0~a7 / rev 9 via SR 1343740

   ...

   f967edf

   Update python314 to version 3.14.3 / rev 35 via SR 1343741

   ...

   d6bc1d9

   Update python313 to version 3.13.12 / rev 39 via SR 1343743

   ...

   6538d72

   Update python311 to version 3.11.15 / rev 67 via SR 1343944

   ...

   2918a9a

   Update python312 to version 3.12.13 / rev 47 via SR 1343943

   ...

   c0a2a89

   Update python310 to version 3.10.20 / rev 74 via SR 1343945

   ...

   af17fe6
5. ambv

   added 2 commits that reference this issue on Apr 3, 2026

   Merge branch 'main' into pythongh-143930-followup

   7e1f5c5

   gh-143930: Tweak the exception message and increase test coverage (GH…

   ...

   3681d47
6. miss-islington

   added a commit that references this issue on Apr 3, 2026

   pythongh-143930: Tweak the exception message and increase test covera…

   ...

   f7a9aca
7. ambv

   added 5 commits that reference this issue on Apr 3, 2026

   [3.14] gh-143930: Tweak the exception message and increase test cover…

   ...

   594b5a0

   [3.13] pythongh-143930: Tweak the exception message and increase test…

   ...

   a43f367

   [3.13] gh-143930: Tweak the exception message and increase test cover…

   ...

   89bfb8e

   [3.12] pythongh-143930: Tweak the exception message and increase test…

   ...

   d11a500

   [3.12] gh-143930: Tweak the exception message and increase test cover…

   ...

   cc02351
8. miss-islington

   added 2 commits that reference this issue on Apr 3, 2026

   [3.12] pythongh-143930: Tweak the exception message and increase test…

   ...

   e1dbc72

   [3.12] pythongh-143930: Tweak the exception message and increase test…

   ...

   0e0506c
9. ambv

   added 2 commits that reference this issue on Apr 3, 2026

   [3.10] gh-143930: Tweak the exception message and increase test cover…

   ...

   591ed89

   [3.11] gh-143930: Tweak the exception message and increase test cover…

   ...

   96fc504
10. ambv

    closed this as completedon Apr 3, 2026
11. mandree

    added 5 commits that reference this issue on Apr 8, 2026

    lang/python314: security update to 3.14.4

    ...

    a045632

    lang/python314: security update to 3.14.4

    ...

    230a095

    lang/python314: security update to 3.14.4

    ...

    73f6660

    lang/python314: security update to 3.14.4

    ...

    b526f87

    lang/python314: security update to 3.14.4

    ...

    62a66cb
12. freebsd-git

    added 2 commits that reference this issue on Apr 12, 2026

    lang/python314: Security update to 3.14.4

    ...

    955268b

    lang/python314: Security update to 3.14.4

    ...

    cb35b3d
13. deepin-ci-robot

    added a commit that references this issue on Apr 15, 2026

    Fix CVE-2026-4519: Reject leading dashes in URLs passed to webbrowser…

    ...

    e06c78e
14. ljfp

    added 2 commits that reference this issue on Apr 25, 2026

    pythongh-143930: Reject leading dashes in webbrowser URLs

    5e9acf2

    pythongh-143930: Tweak the exception message and increase test covera…

    ...

    ec82537
15. camachat

    added 2 commits that reference this issue on Jul 22, 2026

    lang/python314: Security update to 3.14.4

    ...

    7b1d556

    lang/python314: Security update to 3.14.4

    ...

    ec484f0
16. arnout

    added a commit that references this issue on Aug 14, 2026

    package/python3: security bump to v3.12.14

    ...

    80251a0
17. mcepl

    added 3 commits that reference this issue on Sep 18, 2026

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    ...

    9ffd3d7

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    ...

    47e2420

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    ...

    f50b92c
18. mcepl

    added 3 commits that reference this issue on Oct 1, 2026

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    ...

    b1da1ba

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    ...

    bce78d3

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    ...

    5850d12