Re: rosbridge_library Protocol.incoming() quadratic CPU cost in JSON fallback
Alan Coopersmith's mailing list reply merely points to the public oss-security posting of the rosbridge_library disclosure.
A follow-up reply on oss-security by Alan Coopersmith notes that the rosbridge_library Protocol.incoming() quadratic CPU cost issue was disclosed publicly on the oss-security mailing list. The reply contains no additional technical detail beyond linking the original disclosure.
From the original article
Posted by Alan Coopersmith on Sep 14 You disclosed publicly by mailing to the public oss-security mailing list: https://www. openwall. com/lists/oss-security/2026/09/14/28
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.