CVE-2026-87081

A flaw was found in Net::IDN::UTS46. A remote attacker could exploit a vulnerability in the 'toascii' function, which performs punycode encoding. By providing a specially crafted, overlong label containing distinct non-ASCII characters, the attacker could trigger a quadratic time complexity issue...