HIGH 7.5
PYSEC-2024-60
상세
A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
PyPI / idna
최초 영향 버전:
0 수정 버전: 1d365e17e10d72d0b7876316fc7b9ca0eebdd38d 수정
pip install --upgrade 'idna>=1d365e17e10d72d0b7876316fc7b9ca0eebdd38d'