Skip to main content

Share story

Security

Python IDNA implementation remediates Unicode case-folding flaw

Python IDNA implementation remediates Unicode case-folding flaw Image: Primary
A Python security developer reported that Python's IDNA 2003 implementation had a case-folding inconsistency because a StringPrep function used the interpreter's current Unicode lowercasing rather than the Unicode 3.2.0 behavior required by the specification. The reported remediation adds exceptions where current lowercasing differs from Unicode 3.2.0. The issue is identified as CVE-2026-17084. The source advises users to use the separate idna package for IDNA 2008 where possible.
Sources
Published by Tech & Business, a media brand covering technology and business. This story was sourced from sethmlarson.dev and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Infrastructure Capital
Infrastructure Capital

Cloudflare acquires Deno, a rival in developer infrastructure

Cloudflare is buying Deno, the startup co-founded by Node.js creator Ryan Dahl, The New Stack reported. Deno had developed an open-source alternative to Cloudflare Workers, making the acquisition a purchase of a longtime competito...

Security
Security

Huntress finds exploited AhsayCBS flaws persist in latest release

Huntress said Friday that AhsayCBS 10.3.4, the latest version of the backup management platform, remains vulnerable to two flaws attackers are exploiting. Both had been reported as fixed in version 10.3.2. Attacks observed on Octo...

Security
Security

FBI arrests suspected ShinyHunters member linked to agency breach

The FBI arrested another suspected ShinyHunters member believed to be involved in the FBIJobs breach, Director Kash Patel announced Friday. The New York Times identified the suspect as a Canadian citizen arrested in Pennsylvania a...

Security
Security

MonsterCloud owner faces fraud charges over alleged hidden ransom payments

MonsterCloud owner Zohar Pinhasi has been arraigned in New York on wire fraud charges for allegedly misleading ransomware victims about how his company recovered their files, CSO Online reported. Prosecutors allege that he promise...