Fixed a ReDoS (regular expression denial of service) vulnerability: URL
patterns from robots.txt Allow and Disallow directives were
compiled into regular expressions, where multiple * wildcards could
cause exponential backtracking. A server could exploit this to cause denial
of service by serving a crafted robots.txt file. Wildcard matching is
now performed without regular expressions. Please, see the
CVE-2026-55520 and GHSA-wjmf-p669-5m5p security advisories for more
information.