31 matches found
Rocky Linux 8 [CIQ] Security Update: python3-idna (crlsa-2024_4260)
The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20244260 advisory. python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651 Tenable has extracted the preceding description block...
Rocky Linux 9 [CIQ] Security Update: python3-idna (crlsa-2024_3846)
The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20243846 advisory. python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651 This advisory is provided by Ctrl IQ, Inc for Rocky...
CentOS Linux 7 [TuxCare] Security Update: python-idna (CENTOS7:CLSA-2025:1763568610)
The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1763568610 advisory. - A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in idna (CVE-2026-45409)
Summary A Denial of Service vulnerability in the idna domain label parsing library CVE-2026-45409 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 3.18. Vulnerability Details CVEID:CVE-2026-45409 DESCRIPTION: Internationalized Domain Names in...
Exploit for Inefficient Regular Expression Complexity in Kjd Internationalized_Domain_Names_In_Applications
Domain Validation Service — CVE-2024-3651 Demo A Python Flask...
EulerOS Virtualization 2.11.0 : python-idna (EulerOS-SA-2026-3546)
According to the versions of the python-idna package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in...
EulerOS Virtualization 2.12.1 : python-idna (EulerOS-SA-2026-3610)
According to the versions of the python-idna package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in...
EulerOS Virtualization 2.12.0 : python-idna (EulerOS-SA-2026-3664)
According to the versions of the python-idna package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in...
EulerOS 2.0 SP15 : python-idna (EulerOS-SA-2026-3791)
According to the versions of the python-idna package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and...
Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in idna
Summary IBM Watson Discovery Cartridge affected by vulnerability in idna Vulnerability Details CVEID:CVE-2026-45409 DESCRIPTION: Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and Unicode IDNA Compatibility...
Medium: python3.14-pip
Issue Overview: Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as "\u0660" N or "\u30fb" N + "\u6f22" utilize the...
EulerOS Virtualization 2.13.0 : python-idna (EulerOS-SA-2026-3229)
According to the versions of the python-idna package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in...
Amazon Linux 2023 : python3-idna (ALAS2023-2026-2052)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2052 advisory. Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and Unicode IDNA Compatibility Processing. In versions prior to...
CVE-2026-45409
CVE-2026-45409 affects Python’s IDNA handling (idna.encode) in Python-idna. A specially crafted input could cause heavy resource consumption and potential DoS. The issue mirrors CVE-2024-3651; fixes were extended in 3.14–3.15 to reject long inputs earlier and more broadly (per-label conversions a...
CVE-2026-45409: Inefficient Regular Expression Complexity
Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as "\u0660" N or "\u30fb" N + "\u6f22" utilize the validcontexto function pri...
EulerOS 2.0 SP10 : python-pip (EulerOS-SA-2025-1788)
According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises...
Medium: python-idna
Issue Overview: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651 Affected Packages: python-idna Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2...
Medium: python-pip
Issue Overview: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651 Affected Packages: python-pip Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2...
Huawei EulerOS: Security Advisory for python-idna (EulerOS-SA-2024-2601)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : python-idna (EulerOS-SA-2024-2487)
According to the versions of the python-idna packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises...