Reject leading dashes in webbrowser.open() #143930

Activity

1. sethmlarson

   added

   type-securityA security issueA security issue

   stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory

   on Jan 16, 2026
2. sethmlarson

   added a commit that references this issue on Jan 16, 2026

   pythongh-143930: Reject leading dashes in webbrowser URLs

   b0fa074
3. sethmlarson

   added a commit that references this issue on Mar 20, 2026

   gh-143930: Reject leading dashes in webbrowser URLs

   82a24a4
4. miss-islington

   added 2 commits that reference this issue on Mar 20, 2026

   pythongh-143930: Reject leading dashes in webbrowser URLs

   ...

   23cdf33

   pythongh-143930: Reject leading dashes in webbrowser URLs

   ...

   9496346
5. CuriousLearner

   added a commit that references this issue on Mar 22, 2026

   Merge remote-tracking branch 'upstream/main' into fix-pythongh-138577

   ...

   2691ad9
6. ambv

   added 2 commits that reference this issue on Mar 23, 2026

   [3.14] gh-143930: Reject leading dashes in webbrowser URLs (GH-146214)

   ...

   9669a91

   [3.13] gh-143930: Reject leading dashes in webbrowser URLs (GH-146215)

   ...

   43fe06b
7. ambv

   closed this as completedon Mar 23, 2026
8. Pinky-Chaudhary

   added a commit that references this issue on Mar 24, 2026

   pythongh-143930: Reject leading dashes in webbrowser URLs

   ...

   d498b7e
9. ambv

   added 3 commits that reference this issue on Mar 24, 2026

   [3.11] gh-143930: Reject leading dashes in webbrowser URLs (GH-143931) (

   ...

   ceac1ef

   [3.10] gh-143930: Reject leading dashes in webbrowser URLs (GH-143931) (

   ...

   ad4d5ba

   [3.12] gh-143930: Reject leading dashes in webbrowser URLs (GH-146360)

   ...

   cbba611
10. ambv commented on Mar 24, 2026

    

    ambv

    on Mar 24, 2026

    Contributor

    More actions

    Let's not close the issue before a little follow-up PR that I'd like to make here.
11. 26 remaining items

    Load more
12. mandree

    added a commit that references this issue on Apr 11, 2026

    lang/python314: security update to 3.14.4

    ...

    62a66cb
13. freebsd-git

    added 2 commits that reference this issue on Apr 12, 2026

    lang/python314: Security update to 3.14.4

    ...

    955268b

    lang/python314: Security update to 3.14.4

    ...

    cb35b3d
14. deepin-ci-robot

    added a commit that references this issue on Apr 15, 2026

    Fix CVE-2026-4519: Reject leading dashes in URLs passed to webbrowser…

    ...

    e06c78e
15. ljfp

    added 2 commits that reference this issue on Apr 25, 2026

    pythongh-143930: Reject leading dashes in webbrowser URLs

    5e9acf2

    pythongh-143930: Tweak the exception message and increase test covera…

    ...

    ec82537
16. camachat

    added 2 commits that reference this issue on Jul 22, 2026

    lang/python314: Security update to 3.14.4

    ...

    7b1d556

    lang/python314: Security update to 3.14.4

    ...

    ec484f0
17. arnout

    added a commit that references this issue on Aug 14, 2026

    package/python3: security bump to v3.12.14

    ...

    80251a0
18. mcepl

    added 3 commits that reference this issue on Sep 18, 2026

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    ...

    9ffd3d7

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    ...

    47e2420

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    ...

    f50b92c
19. mcepl

    added 3 commits that reference this issue on Oct 1, 2026

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    ...

    b1da1ba

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    ...

    bce78d3

    [CVE-2026-4519] Reject leading dashes in webbrowser URLs

    ...

    5850d12