VDB
EN
HIGH 7.5

PYSEC-2024-60

상세

A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

PyPI / idna
최초 영향 버전: 0 수정 버전: 1d365e17e10d72d0b7876316fc7b9ca0eebdd38d
수정 pip install --upgrade 'idna>=1d365e17e10d72d0b7876316fc7b9ca0eebdd38d'

참고