Marc-Andre Lemburg

**Name of the Vulnerable Software and Affected Versions** Python (affected versions not specified) **Description** The `stringprep` module incorrectly processes characters from RFC 3454 tables B.2 or B.3 by using the latest Unicode codepoint attributes instead of the required Unicode 3.2.0. This leads to mismatches when processing domain names via the `idna` codec (IDNA 2003) and the `in table b2()` function. The issue specifically impacts domain names containing characters that were either not registered or had their Unicode attributes, such as case-folding behavior, updated after Unicode 3.2.0. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.