Skip to content
OpenAdvisories
Medium ALSA-2026:54481 1 CVE

Moderate: python-idna security update

Published Aug 13, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python-idna: idna: Denial of Service via specially crafted long inputs (CVE-2026-45409)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
AlmaLinux · 10 python3-idna 3.7-6.el10_2

Vulnerabilities 1

  • Medium 6.9
    CVE-2026-45409

    Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

    Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as `"\u0660" * N` or `"\u30fb" * N …

    kjd idna open-webui katib-suggestion-hyperopt Debian Ubuntu Wolfi PyPI

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-45409
  • report
    https://bugzilla.redhat.com/2485616
  • advisory
    https://errata.almalinux.org/10/ALSA-2026-54481.html