NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-3276
Summary

unicodedata.normalize() can take excessive CPU time when processing
specially crafted Unicode input containing long runs of combining characters
with alternating Canonical Combining Class values.
This affects all normalization forms.

Publication Date June 4, 2026, 1:16 a.m.
Registration Date June 4, 2026, 4:16 a.m.
Last Update June 4, 2026, 1:16 a.m.
Related information, measures and tools
Common Vulnerabilities List