Skip to content
OpenAdvisories

Package · Debian

python-idna

2 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Feed

  • Medium 6.9
    CVE-2026-45409

    Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

    Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as `"\u0660" * N` or `"\u30fb" * N …

    kjd idna python-pip python-idna Debian Ubuntu PyPI
  • Medium 6.2
    CVE-2024-3651

    Denial of Service via Quadratic Complexity in kjd/idna

    A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a…

    kjd kjd/idna python-pip python-idna Debian Ubuntu Alpine PyPI