{"action":"Upgrade qutebrowser to 2.4.0 or later.","affected":[{"fixed":"2.4.0","introduced":"1.7.0"}],"component":"qutebrowser","cve_ids":["CVE-2021-41146"],"ecosystem":"PyPI","epss":0.01496,"exploited":false,"fixed_versions":["2.4.0"],"ghsa_id":"GHSA-vw27-fwjf-5qxm","id":"tcs_01M5KG0Y981JZACJSJN7DY9EKE","modified_at":"2026-07-08T06:28:00.918975591Z","published_at":"2021-10-22T16:20:10Z","references":["https://osv.dev/vulnerability/GHSA-vw27-fwjf-5qxm","https://github.com/qutebrowser/qutebrowser/security/advisories/GHSA-vw27-fwjf-5qxm","https://nvd.nist.gov/vuln/detail/CVE-2021-41146","https://github.com/qutebrowser/qutebrowser/commit/8f46ba3f6dc7b18375f7aa63c48a1fe461190430","https://github.com/pypa/advisory-database/tree/main/vulns/qutebrowser/PYSEC-2021-382.yaml","https://github.com/qutebrowser/qutebrowser"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-vw27-fwjf-5qxm","url":"https://osv.dev/vulnerability/GHSA-vw27-fwjf-5qxm"}],"summary":"Arbitrary command execution on Windows via qutebrowserurl: URL handler"}