GoKawiilPython's stringprep module flagged for Unicode version mismatch security flaw
Security researcher Seth Larson identified that Python's stringprep module, used in IDNA 2003 domain name processing, relies on str.lower() which uses whatever Unicode version ships with the interpreter rather than the fixed Unicode 3.2 version specified in RFC 3454. This means case-folding behavior for internationalized domain names can differ across Python versions, since unicodedata.unidata_version varies by interpreter build.