TI-2026-42274 CVE-2026-59094 · GHSA-22xx-xg3v-m8g7
Pathway - Unauthenticated Denial of Service via Exponential Glob Pattern Matching in Document Store
Priority HIGH 77
Pathway through 0.31.1, fixed in commit d09722e, document store applies a caller-supplied glob pattern to indexed document paths using a hand-written recursive matcher that branches two ways on each ** token without memo…