Lucene search
+L

1 matches found

Hacker One
Hacker One
•added 2026/04/05 6:17 a.m.•38 views

curl: no_proxy IDN mismatch: Unicode hostnames bypass proxy exclusion list

Summary Unicode IDN hostnames in noproxy are never converted to punycode before comparison, so they never match the request hostname which curl has already converted to punycode. A user who types noproxy="bücher.de" and requests http://bücher.de/ expects the proxy to be bypassed. Instead curl...

7.5CVSS6.4AI score0.16598EPSS
SaveExploits1
Rows per page
Query Builder