Threats affecting pkg:github/pistacheio/pistache

CVE-2026-62303 is a medium severity vulnerability in the pistache C++ REST toolkit versions 0.0.5 through 0.4.26. It involves uncontrolled resource consumption due to recursive use of std::regex_replace in path normalization, which can exhaust the stack and crash the process when processing very long request paths containing tens of thousands of consecutive slashes. Exploitation requires the deployment to allow unusually long request paths beyond the default 4096-byte limit or attacker control over router API inputs. No official patch release was confirmed at the time of disclosure.