10 matches found
MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted maps
Summary ExpandoObjectFormatter.Deserialize populates System.Dynamic.ExpandoObject by calling IDictionary.Add for each map entry. ExpandoObject internally maintains member names in array-like structures, so inserting many distinct keys can require repeated linear scans and array copies. For large...
7.5CVSS5.8AI score0.00405EPSS
SaveExploits0References3Affected Software1
20