Skip to content
OpenAdvisories

Product · sporkmonger

addressable

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-126348

    Addressable display_uri can show misleading hosts with invalid Punycode A-labels

    Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.0.0 until 2.9.1, the pure-Ruby Addressable::IDNA.to_unicode implementation decodes invalid Punycode A-labels instead of returning them uncha…

    sporkmonger addressable