Post
Gene Conroy-Jones
foursignalsdev.bsky.social
did:plc:446o4dvplp6vhhjayeapiuxt
Python's `str.lower()` in IDNA 2003 encoding mismatches Unicode versions, creating CVE-2026-17084 bypass risk. Audit `str.encode('idna')` usage now.
https://www.foursignals.dev/wire/2026-08-26/when-str-lower-is-a-security-vulnerability-in-python-788dfb
2026-08-26T15:01:42.368Z