8.8
CVSS V3
Status
Impact
idna is pulled in as a transitive dependency of trust-dns-resolver, and cannot be remediated at this time due to numerous build failures when attempting to switch to hickory-proto@0.24.2, which is the replacement package with the upgraded idna dependency. Upstream will need to make these changes.
Status