Back to CVE List

CVE-2026-3276

Vulnerability Description

unicodedata.normalize() can take excessive CPU time when processing
specially crafted Unicode input containing long runs of combining characters
with alternating Canonical Combining Class values.
This affects all normalization forms.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-407
Source
NVD

External References

Discussion (0)

Add Comment

No comments yet. Be the first!