oss-security·12d agorosbridge_library Protocol.incoming() quadratic CPU cost in JSON fallback#algorithmic-complexity#cwe-407#denial-of-serviceVulnerability 2 sources1