VYPR

Net Idn Punycode

by RubyGems

Source repositories

CVEs (1)

  • CVE-2026-87082HigSep 22, 2026
    risk 0.42cvss 7.5epss 0.01

    Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode. Neither backend checks that its input is well-formed UTF-8, so a string with the UTF-8 flag set over malformed bytes, as the :utf8 PerlIO…