# Python IDNA implementation remediates Unicode case-folding flaw

_Tuesday, August 25, 2026 at 4:49 PM EDT · Security · Latest · Tier 2 — Notable_

![Python IDNA implementation remediates Unicode case-folding flaw — Primary](https://github.com/sethmlarson.png)

A Python security developer reported that Python's IDNA 2003 implementation had a case-folding inconsistency because a StringPrep function used the interpreter's current Unicode lowercasing rather than the Unicode 3.2.0 behavior required by the specification. The reported remediation adds exceptions where current lowercasing differs from Unicode 3.2.0. The issue is identified as CVE-2026-17084. The source advises users to use the separate idna package for IDNA 2008 where possible.

## Sources

- [Hacker News](https://sethmlarson.dev/when-str-lower-is-a-security-vulnerability)

---
Canonical: https://techandbusiness.org/newswire/SaRypL6-sk8ur8yqazuct2
Retrieved: 2026-08-26T01:16:43.494Z
Publisher: Tech & Business (techandbusiness.org)