55
55
55
30
55
42
Re: rosbridge_library Protocol.incoming() quadratic CPU cost in JSON fallback
David Wheeler notes a rosbridge_library quadratic CPU cost flaw was publicly disclosed on oss-security without prior coordination.
In an oss-security reply, David A. Wheeler pointed out that a poster had just publicly disclosed details of a quadratic CPU cost issue in rosbridge_library's Protocol.incoming() JSON fallback path. Wheeler referenced the mailing list's stated norms encouraging public discussion of open-source security flaws. The reply itself contains no fix, CVE, or exploitation details.
12
30
55
30
55
30
60
30
55
55
35
55
30
55
30
35
30
60
55
30
42
60
55
30
30
30
55
30
55
30
60
30
30
42