idna (PyPI)
Internationalized Domain Names for Python (IDNA 2008 and UTS #46)
Advisories
6
Latest version
3.20.0
Released Sep 17, 2026
License
BSD-3-Clause
OpenSSF Scorecard
8.5 / 10
How to fix
Upgrading to 3.15 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "idna>=3.20.0"poetry
poetry add "idna>=3.20.0"uv
uv add "idna>=3.20.0"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-65pc-fj4g-8rjx Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix |
Medium EPSS 0.41% |
< 3.15 | 3.15 |
| GHSA-65pc-fj4g-8rjx Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix |
Medium EPSS 0.41% |
< 3.15 | 3.15 |
| GHSA-65pc-fj4g-8rjx Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix |
Medium EPSS 0.41% |
< 3.15 | 3.15 |
| GHSA-jjg7-2v4v-x38h Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode |
Medium EPSS 1.39% |
< 3.7 | 3.7 |
| GHSA-jjg7-2v4v-x38h Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode |
Medium EPSS 1.39% |
< 3.7 | 3.7 |
| GHSA-jjg7-2v4v-x38h Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode |
Medium EPSS 1.39% |
>= 0.1, < 3.7 | 3.7 |
Source: https://github.com/kjd/idna
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor