CVE-2026-59094: Python Recursive Glob Dos

A recursive function performs pattern matching branching with 'or' and without memoization. This can lead to evaluating overlapping subproblems multiple times, resulting in an exponential Time Complexity (Denial of Service) when evaluating strings containing many wildcards. Use dynamic programming with a memoization dictionary or a `@functools.cache` decorat

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-59094-python-recursive-glob-dos --engine opengrep

Description

A recursive function performs pattern matching branching with 'or' and without memoization. This can lead to evaluating overlapping subproblems multiple times, resulting in an exponential Time Complexity (Denial of Service) when evaluating strings containing many wildcards. Use dynamic programming with a memoization dictionary or a `@functools.cache` decorat