unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-3276US | — | — | ||
unicodedata.normalize() can take excessive CPU time when processing
specially crafted Unicode input containing long runs of combining characters
with alternating Canonical Combinin… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/python/cpython/commit/6b505d1f41f8f3ea0fe5a4786d3a8fff1875cfc0FIX
- https://github.com/python/cpython/commit/90748760d38ca3ac5fc6788a69becab905c95598FIX
- https://github.com/python/cpython/commit/991224b1e8311c85f198f6dd8208bf8cff7fc26fFIX
- https://github.com/python/cpython/commit/ba785b88add96acbf403d65cb157fb2743a33a32FIX
- https://github.com/python/cpython/commit/c5512bd7c1dc28055660565275012766941d3066FIX
- https://github.com/python/cpython/commit/d3ab945af25b28dfe13ac6cb40c124a01b33ce1fFIX
- https://github.com/python/cpython/commit/db744c0776c1d5dd11aaa70eff2a6993c408baccFIX
- https://github.com/python/cpython/commit/e322a1857084d521f79f45181b776f62e6acfc2cFIX
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan