Trail of Bits Blog Follow Don’t recurse on untrusted input We developed a simple CodeQL query to find denial-of-service (DoS) vulnerabilities in several high-profile Java projects. https://blog.trailofbits.com/2025/02/21/dont-recurse-on-untrusted-input/ blog.trailofbits.com