CVE-2024-3651: 
Python vulnerability analysis and mitigation

A vulnerability was identified in the kjd/idna library version 3.6, specifically within the idna.encode() function. The issue was discovered in early 2024 and involves the function's handling of crafted input strings that can lead to quadratic complexity and consequently, a denial of service condition (NVD).

The vulnerability affects the idna.encode() function and is triggered by specially crafted input that causes the function to process with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (NVD).

When exploited, this vulnerability can lead to a denial of service condition by causing the idna.encode() function to consume excessive computational resources, potentially affecting the availability of the system running the affected software (NVD).

The vulnerability has been fixed in version 3.7 of the kjd/idna library, released on April 11, 2024. Users are advised to upgrade to this version to address the security issue (GitHub Commit).