Threats tagged 'brew-travis-cve-2026-126351'

Addressable versions prior to 2.9.1 contain a denial of service vulnerability in the URI path normalization function. The function normalize_path operates with quadratic time complexity relative to the number of nested dot segments in a URI path, causing excessive resource consumption when processing crafted inputs. This can lead to denial of service when normalizing, comparing, or joining URIs derived from untrusted sources. The issue is fixed in version 2.9.1.