CVE-2026-120420

A denial-of-service vulnerability was found in the Drools DRL expression parser org.drools:drools-drl-parser. The ANTLR4-generated DRL expression grammar parses parenthesised sub-expressions through mutually recursive descent rules with no limit on nesting depth. When a deeply nested parenthesise...