Threats tagged 'ghsa-5qjr-cj9f-phrx'

The Python standard library functions urllib.parse.urlsplit and urlparse accepted domain names containing square brackets, which is invalid per RFC 3986. Square brackets should only delimit IPv6 and IPvFuture addresses in URLs. This discrepancy can cause inconsistent URL parsing between Python and other compliant parsers.