Threats Tagged 'cve-2026-45409'

CVE-2026-45409 is a medium severity vulnerability in the kjd idna Python library versions prior to 3. 15. It involves inefficient regular expression complexity in the valid_contexto function, which can be exploited by specially crafted inputs to cause excessive processing time and resource consumption, leading to a denial-of-service condition. The issue is triggered by very long inputs that exceed normal domain name lengths and bypass preliminary input validation. Starting in version 3. 14, the library began rejecting long inputs early to reduce resource usage, and this was extended in version 3. 15 to cover additional functions. Enforcing the domain name length limit of 253 characters before calling idna. encode() can mitigate the issue. No official patch or fix status is confirmed in the vendor advisory.