Skip to content
OpenAdvisories

Package · Alpine

cargo-modules

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.1

    idna accepts Punycode labels that do not produce any non-ASCII when decoded

    Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to anoth…