Internationalized Domain Name Validation

Nodemailer is vulnerable to an internationalized domain name validation/bypass. The vulnerability is due to inconsistent Punycode A-label generation, which allows an attacker to craft recipient addresses containing invisible characters or compatibility mappings to bypass domain allow-list checks...

Linux Distros Unpatched Vulnerability : CVE-2026-100891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library...

CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

DEBIAN-CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

UBUNTU-CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

EUVD-2026-88055

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-100891 Trusted Domain Project OpenDMARC Internationalized Domain Name opendmarc_policy.c opendmarc_policy_query_dmarc encoding error

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-100891

A vulnerability exists in Trusted Domain Project OpenDMARC up to version 1.4.2 . The issue is located within the Internationalized Domain Name Handler component, specifically in the opendmarc_policy_query_dmarc function of the libopendmarc/opendmarc_policy.c library. An encoding error can be trig...

CVE-2026-100891 Trusted Domain Project OpenDMARC Internationalized Domain Name opendmarc_policy.c opendmarc_policy_query_dmarc encoding error

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-100891

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

CVE-2026-100891: Encoding Error

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarcpolicyquerydmarc in the library libopendmarc/opendmarcpolicy.c of the component Internationalized Domain Name Handler. Such manipulation leads to encoding error. It is...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in URL formatting in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

GHSA-4C8G-83QW-93J6 fast-uri vulnerable to host confusion via failed IDN canonicalization

Impact fast-uri versions = 2.3.1, = 4.0.0 fail to canonicalize Unicode/IDN hostnames for HTTP-family URLs. The IDN conversion path calls URL.domainToASCII... on the global WHATWG URL constructor, where that helper does not exist. The resulting TypeError is silently routed into parsed.error, but...

NPM: fast-uri vulnerable to host confusion via failed IDN canonicalization

NPM: fast-uri vulnerable to host confusion via failed IDN canonicalization vulnerability discovered by ? in WordPress Npm fast-uri versions = 2.3.1, 2.4.2...

RHEL 9 : rhc (RHSA-2026:39879)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39879 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

EUVD-2026-44537

Symfony Polyfill backports PHP features and provides compatibility layers for extensions and functions. From 1.17.1 until 1.38.1, symfony/polyfill-intl-idn accepts xn-- labels whose Punycode payload is empty or decodes to ASCII-only code points because Idn::process does not enforce the UTS 46...

SUSE CVE-2026-13676

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode IDN hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize and equal still return...

CVE-2026-13676

A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode Internationalized Domain Name - IDN hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when...

CVE-2026-13676

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode IDN hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize and equal still return...