v3.14
Security 1
- Reject oversize inputs up-front to prevent processing long inputs into quadratic time, closing a bypass of the CVE-2024-3651 mitigation
- Removed opportunity to process long inputs into quadratic time by rejecting oversize inputs up-front. Closes a bypass of the CVE-2024-3651 mitigation. [CVE-2026-45409]
Thanks to Stan Ulbrych for reporting the issue.