CVE-2025-9624: Nested Boolean/Disjunction Asymmetric DoS in Amazon's OpenSearch query_string - Chick

How I found CVE-2025-9624, an asymmetric Denial of Service in Amazon's OpenSearch's query_string handling, and how it was fixed with search.query.max_query_string_length.