---
id: 1426
title: "Don’t recurse on untrusted input"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2025/02/21/dont-recurse-on-untrusted-input/"
published_at: "2025-02-21 05:00"
tags: ["java", "vulnerability-disclosure", "codeql", "protobuf", "trail-of-bits", "dos", "recursion", "stack-overflow"]
phying_url: "https://phying.com/item/1426"
lang: en
---

# Don’t recurse on untrusted input

## Summary

We developed a simple CodeQL query to find denial-of-service (DoS) vulnerabilities in several high-profile Java projects.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2025-02-21 05:00
- **Original:** https://blog.trailofbits.com/2025/02/21/dont-recurse-on-untrusted-input/
- **Phying News:** https://phying.com/item/1426