Service interruption via nonconsuming path regex

Infinite-loop denial of service in Gary Court URI.js 4.4.1 and earlier allows remote attackers to crash Node.js processes via crafted IRIs. In removeDotSegments, the RDS5 regex matches an empty string at a Unicode line or paragraph separator, so the loop never shortens its input and keeps appending empty strings. Exposure requires an application to pass attacker-controlled input directly or through normalize or resolve with IRI handling enabled; a successful trigger blocks the event loop and exhausts the process heap.