Debian/python3.13: unknown

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matchi

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

osv: DEBIAN-CVE-2026-15806#Debian:13/python3.13
https://security-tracker.debian.org/tracker/CVE-2026-15806

published 2026-08-18T16:17:02.220Z · modified 2026-10-23T18:05:02.780385165Z · JSON