Part of a story covered by 3 sources: “rosbridge_library Protocol.incoming() quadratic CPU cost disclosed on oss-security; follow-ups flag uncoordinated disclosure” — merged summary and timeline →
Re: rosbridge_library Protocol.incoming() quadratic CPU cost in JSON fallback
AI summary · glm-5.3
Alan Coopersmith's mailing list reply merely points to the public oss-security posting of the rosbridge_library disclosure.
A follow-up reply on oss-security by Alan Coopersmith notes that the rosbridge_library Protocol.incoming() quadratic CPU cost issue was disclosed publicly on the oss-security mailing list. The reply contains no additional technical detail beyond linking the original disclosure.
Full article
Posted by Alan Coopersmith on Sep 14 You disclosed publicly by mailing to the public oss-security mailing list: https://www.openwall.com/lists/oss-security/2026/09/14/28
This source does not provide full text. Read it at seclists.org.