{"action":"Upgrade idna to 3.7 or later.","affected":[{"fixed":"3.7","introduced":"0.1"}],"component":"idna","cve_ids":["CVE-2024-3651"],"ecosystem":"PyPI","epss":0.01386,"exploited":false,"fixed_versions":["3.7"],"ghsa_id":"GHSA-jjg7-2v4v-x38h","id":"tcs_01M5KGNB48M5532RV95Q0YX1BG","modified_at":"2026-06-10T17:01:21.102419358Z","published_at":"2024-07-07T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2024-60","https://huntr.com/bounties/93d78d07-d791-4b39-a845-cbfabc44aadb","https://github.com/kjd/idna/commit/1d365e17e10d72d0b7876316fc7b9ca0eebdd38d","https://github.com/advisories/GHSA-jjg7-2v4v-x38h"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2024-60","url":"https://osv.dev/vulnerability/PYSEC-2024-60"}],"summary":"A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings,"}