The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cargo-modules | Aug 8, 2025 | May 30, 2025 |
| Debian | — | Upgrade rust-idna | May 15, 2025 | May 15, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2025 |
| Suse | — | Upgrade snpguestUpgrade python313-nh3Upgrade librav1e0_6-32bitUpgrade aws-nitro-enclaves-binaryblobs-upstreamUpgrade keylime-ima-policyUpgrade librav1e0_6Upgrade sccacheUpgrade system-group-neUpgrade rav1eUpgrade rustupUpgrade sevctlUpgrade rav1e-develUpgrade aws-nitro-enclaves-cliUpgrade rust-keylime | Dec 5, 2025 | Jul 2, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub