CVE-2024-12224 — idna accepts Punycode labels that do not produce any non-ASCII when decoded
Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might trea…
Published: 2025-05-30 · CVSS: 5.1 · CVSS 4.0
Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7