Lucene search
+L

10 matches found

Github Security Blog
Github Security Blog
•added 2026/06/25 7:36 p.m.•20 views

MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted maps

Summary ExpandoObjectFormatter.Deserialize populates System.Dynamic.ExpandoObject by calling IDictionary.Add for each map entry. ExpandoObject internally maintains member names in array-like structures, so inserting many distinct keys can require repeated linear scans and array copies. For large...

7.5CVSS5.8AI score0.00405EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder