TI-2024-11338 CVE-2024-12224 · GHSA-h97m-ww89-6jmq
idna accepts Punycode labels that do not produce any non-ASCII when decoded
Priority MEDIUM 56
Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that sy…