VYPR

Net::IDN::Punycode::PP

by Perl Foundation

CVEs (1)

  • CVE-2026-87080CriSep 22, 2026
    risk 0.52cvss 9.1epss —

    Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode. The pure-Perl decoder reads one digit at a time with four-argument substr and tests the result with defined to detect the end of…