CVE-2026-17084

Name of the Vulnerable Software and Affected Versions Python (affected versions not specified)

Description The stringprep module incorrectly processes characters from RFC 3454 tables B.2 or B.3 by using the latest Unicode codepoint attributes instead of the required Unicode 3.2.0. This leads to mismatches when processing domain names via the idna codec (IDNA 2003) and the in table b2() function. The issue specifically impacts domain names containing characters that were either not registered or had their Unicode attributes, such as case-folding behavior, updated after Unicode 3.2.0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.