An invalid connected-components:keep-top value could result in a heap buffer over-read when performing the connected components operation.
{
"github_reviewed": true,
"severity": "MODERATE",
"nvd_published_at": null,
"cwe_ids": [
"CWE-125",
"CWE-129"
],
"github_reviewed_at": "2026-05-18T17:48:00Z"
}