THREAT OPS › Threat News › CVE-2026-19953: URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep
CVE-2026-19953: URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep
<p>Posted by Robert Rothenberg on Aug 31</p>========================================================================<br /> CVE-2026-19953 CPAN Security Group<br /> ========================================================================<br /> <br /> CVE ID: CVE-2026-19953<br /> Distribution: URI<br /> Versions: before 5.36<br /> <br />
Indicators of compromise
- CVE-2026-19953cve
- https://metacpan.org/dist/URIurl
Original source: https://seclists.org/oss-sec/2026/q3/631