Threats tagged 'ghsa-jjg7-2v4v-x38h'

The idna library versions prior to 3.7 contain a vulnerability in the idna.encode() function where specially crafted inputs can cause excessive resource consumption, leading to a denial-of-service (DoS). This issue is addressed in version 3.7 by rejecting such inputs without consuming significant resources. Enforcing a domain name length limit of 253 characters before calling idna.encode() can mitigate the issue.