CVE-2026-56860

The net/url package in golang is vulnerable to a Denial of Service (DoS) due to quadratic time complexity during path resolution. When resolving relative paths containing parent directory (..) segments, the system previously performed string conversions and buffer rewrites at each step, leading t...