TLDR Tech / Dev
When str.lower() is a security vulnerability in Python
The use of `str.lower()` in Python's StringPrep implementation poses a security vulnerability due to its reliance on the Unicode data version that comes with the Python interpreter. The recent remediation involves creating new exceptions to align `str.lower()`'s behavior with Unicode 3.2.0.
Read the full story