THREATOPS
THREAT OPSThreat News › CVE-2026-19953: URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep

CVE-2026-19953: URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep

medoss_secPublished 2026-08-31

<p>Posted by Robert Rothenberg on Aug 31</p>========================================================================<br /> CVE-2026-19953                                       CPAN Security Group<br /> ========================================================================<br /> <br />         CVE ID:  CVE-2026-19953<br />   Distribution:  URI<br />       Versions:  before 5.36<br /> <br />

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/631