Skip to content
OpenAdvisories

Vendor

pathwaycom

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.5

    Pathway - Unauthenticated Denial of Service via Exponential Glob Pattern Matching in Document Store

    Pathway through 0.31.1, fixed in commit d09722e, document store applies a caller-supplied glob pattern to indexed document paths using a hand-written recursive matcher that branches two ways on each ** token without memoization, giving exponential worst-case …