Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2026/04/05 6:17 a.m.21 views

curl: no_proxy IDN mismatch: Unicode hostnames bypass proxy exclusion list

Summary Unicode IDN hostnames in noproxy are never converted to punycode before comparison, so they never match the request hostname which curl has already converted to punycode. A user who types noproxy="bücher.de" and requests http://bücher.de/ expects the proxy to be bypassed. Instead curl...

7.5CVSS6.6AI score0.1654EPSS
SaveExploits1
Rows per page
Query Builder