kjd vulnerabilities

Products

• internationalized domain names in applications 2
• idna 1
• kjd/idna 1

Latest kjd CVEs

Newest publication first

1. CVE-2026-45409 Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

   Published 2026-06-05

   Medium·CVSS 6.9 EPSS 0.41%

   Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as "\u0660" * N or "\u30fb" * N + "\u6f22" utilize the v...

2. CVE-2024-3651 Denial of Service via Quadratic Complexity in kjd/idna

   Published 2024-07-07

   High·CVSS 7.5 EPSS 1.4%

   A vulnerability was identified in the kjd/idna library, specifically within the idna.encode() function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service cond...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.