CVE-2022-45061

Advisory

Xiaogpt version 2.31 is susceptible to a denial of service vulnerability due to issues with how idna.encode handles specially crafted inputs.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

   🐞 Bug Fixes

- Vulnerable to denial of service from specially crafted inputs to idna.encode &nbsp;-&nbsp; by yihong0618 [<samp>(74f9d)</samp>](https://github.com/yihong0618/xiaogpt/commit/74f9de2)

&nbsp;&nbsp;&nbsp;&nbsp;[View changes on GitHub](https://github.com/yihong0618/xiaogpt/compare/v2.30...v2.31)

Resources

• https://pypi.org/project/xiaogpt
• https://data.safetycli.com/changelogs/xiaogpt/
• https://github.com/yihong0618/xiaogpt/commit/74f9de2
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45061