CVE-2026-56860

The golang net/url package is vulnerable to a Denial of Service (DoS) condition due to quadratic time complexity during path resolution. The flaw occurs when resolving relative paths containing parent directory (..) segments, which previously triggered string conversions and buffer rewrites at ev...