unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms.
7.1.1+dfsg-17.2.0+dfsg-17.3.0+dfsg-17.3.0+dfsg-1ubuntu27.3.0+dfsg-1ubuntu37.3.1+dfsg-47.3.1+dfsg-4ubuntu0.13.10.12-1~22.04.163.12.3-1ubuntu0.157.3.19+dfsg-17.3.19+dfsg-27.3.20+dfsg-17.3.20+dfsg-33.13.3-13.13.3-23.13.3-43.13.4-13.13.5-13.13.5-23.13.6-13.13.7-13.13.7-1ubuntu0.13.13.7-1ubuntu0.2+2 more3.14.0-13.14.0-1ubuntu0.13.14.0-1ubuntu0.23.14.0-1ubuntu0.33.14.0~a7-0ubuntu13.14.0~b1-13.14.0~b3-13.14.0~rc1-13.14.0~rc2-13.14.0~rc3-13.14.4-1ubuntu0.1Exploitability
AV:NAC:LAT:PPR:NUI:NVulnerable System
VC:NVI:NVA:LSubsequent System
SC:NSI:NSA:NCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N