Skip to content
OpenAdvisories
Medium RHSA-2026:54290 1 CVE

Red Hat Security Advisory: python-idna security update

Published Aug 13, 2026 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos python-idna 0:2.5-8.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos python3-idna 0:2.5-8.el8_10

Vulnerabilities 1

  • Medium 6.9
    CVE-2026-45409

    Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

    Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as `"\u0660" * N` or `"\u30fb" * N …

    kjd idna open-webui katib-suggestion-hyperopt Debian Ubuntu Wolfi PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2485616
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54290.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-45409
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-45409
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-45409
  • article
    https://github.com/kjd/idna/security/advisories/GHSA-65pc-fj4g-8rjx