Logo
componentpython3-idna
Name
python3-idna
Version
3.3
Type
library
Description
Internationalised Domain Names in Applications
Licenses
BSD-3-Clause & Python-2.0 & Unicode-TOU
PURL
-
CPE
cpe:2.3:*:*:python3-idna:3.3:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
master
3.18
scarthgap
3.7

Patches#


#
Title
Author
Resolve
1
More efficient resolution of joiner contexts
Kim Davies <kim@cynosure.com.au>
CVE-2024-3651

Vulnerabilities#


Name
Analysis
Description
Patched
A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.