VYPR

URI

by Libwww Perl

CVEs (1)

  • CVE-2026-19953Aug 31, 2026
    risk 0.00cvss epss

    URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded…