The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This is fixed in 0.12.6.
"https://github.com/pypa/advisory-database/blob/main/vulns/validators/PYSEC-2019-134.yaml"