java on The Trail of Bits Bloghttps://miscreants.github.io/blog.trailofbits.com/categories/java/Recent content in java on The Trail of Bits BlogHugoen-usFri, 21 Feb 2025 00:00:00 -0500Don’t recurse on untrusted inputhttps://miscreants.github.io/blog.trailofbits.com/2025/02/21/dont-recurse-on-untrusted-input/Fri, 21 Feb 2025 00:00:00 -0500https://miscreants.github.io/blog.trailofbits.com/2025/02/21/dont-recurse-on-untrusted-input/We developed a simple CodeQL query to find denial-of-service (DoS) vulnerabilities in several high-profile Java projects.