CVE-2026-87082

A flaw was found in Net::IDN::Punycode. An attacker can provide specially crafted, malformed UTF-8 input to the encodepunycode function. This lack of validation can lead to the application hanging, crashing, or generating an incorrect label, resulting in a Denial of Service DoS or data integrity...