Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/22 4:16 p.m.5 views

AZL-88374 CVE-2026-39821 affecting package vitess for versions less than 19.0.4-10

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

9.6CVSS6.3AI score0.00692EPSS
SaveExploits0References1
Rows per page
Query Builder