CVE-2026-87078 | Punycode up to 2.589 XS backend decode_punycode allocation of resources

September 22, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Punycode up to 2.589. Affected by this issue is the function decode_punycode of the component XS backend. The manipulation results in allocation of resources.

This vulnerability is cataloged as CVE-2026-87078. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More