Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-56860

Опубликовано: 13 авг. 2026
Источник: nvd
CVSS3: 5.9
EPSS Низкий

Описание

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.

EPSS

Процентиль: 42%
0.00518
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-407

Связанные уязвимости

CVSS3: 5.9
ubuntu
23 дня назад

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.

CVSS3: 7.5
redhat
23 дня назад

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.

msrc
16 дней назад

Avoid quadratic complexity in resolvePath in net/url

CVSS3: 5.9
debian
23 дня назад

Previously, resolving relative paths containing parent directory ('..' ...

CVSS3: 5.9
github
23 дня назад

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.

EPSS

Процентиль: 42%
0.00518
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-407