Randomize hash seed to mitigate hash collision DoS attacks
The hash function used a fixed seed, allowing attackers to craft colliding keys and cause O(n^2) object parsing performance. Initialize the seed from a random source at process startup to prevent the attack. This fixes CVE-2026-40164. Co-authored-by: Asaf Meizner <asafmeizner@gmail.com>
I
itchyny committed
0c7d133c3c7e37c00b6d46b658a02244fdd3c784
Parent: 6374ae0