tocsin

Debian/pypy3: unknown

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the u

Action: Upgrade pypy3 to 7.3.22+dfsg-1 or later.

Affected

introducedfixedlast affected
07.3.22+dfsg-1-

Fixed versions

7.3.22+dfsg-1

Sources

published · modified · JSON