GHSA-jgvr-6x5w-hx5w

GHSA-jgvr-6x5w-hx5w · Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service

This page contains facts from public vulnerability sources. Check the original advisory before updating.

### Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive `expression` -> `unnecessarily_bracketed` -> `expression` path. With enough nesting, the call stack grows until it exceeds the process stack limit, causing a stack overflow.

CVSS 6.9 · Medium · Fix available

Published

2026-08-20T18:34:05Z

Updated

2026-08-20T18:45:14.889310Z

Stack: python

Check your server →