Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-25mv-j2qr-v5jq

Опубликовано: 14 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.

EPSS

Процентиль: 42%
0.00518
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-407

Связанные уязвимости

CVSS3: 5.9
ubuntu
23 дня назад

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.

CVSS3: 7.5
redhat
23 дня назад

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.

CVSS3: 5.9
nvd
23 дня назад

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.

msrc
16 дней назад

Avoid quadratic complexity in resolvePath in net/url

CVSS3: 5.9
debian
23 дня назад

Previously, resolving relative paths containing parent directory ('..' ...

EPSS

Процентиль: 42%
0.00518
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-407