Servo Rust-url vulnerabilities

• servo idna, rust-url +1 more idna accepts Punycode labels that do not produce any non-ASCII when decoded CVE-2024-12224 Fix available 5.1 MediumDecember 9, 2024