—

PYSEC-2019-134

Quick fix

PYSEC-2019-134 — validators: upgrade to the fixed version with the command below.

pip install --upgrade 'validators>=0.12.6'

Details

The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This is fixed in 0.12.6.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/validators

Introduced in: 0.12.2Fixed in: 0.12.6

Fixpip install --upgrade 'validators>=0.12.6'

References

https://github.com/kvesteri/validators/issues/86[REPORT]
https://github.com/advisories/GHSA-5qcg-w2cc-xffw[ADVISORY]