CVE-2026-59315: Unbounded Dash Split Loop Dos

Unbounded string splitting using `lastIndexOf` in a `while` loop without limiting the number of iterations can lead to Denial of Service (DoS) via resource exhaustion when handling inputs with excessive delimiters.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Java
greprules fetch cve-2026-59315-unbounded-dash-split-loop-dos --engine opengrep

Description

Unbounded string splitting using `lastIndexOf` in a `while` loop without limiting the number of iterations can lead to Denial of Service (DoS) via resource exhaustion when handling inputs with excessive delimiters.