Programming Languages
Bug Report
One regex pinned CPU at 100%: catastrophic backtracking and ReDoS in Python
A single 40-character form value froze an API worker for minutes. A nested quantifier in a validation regex made Python's backtracking engine try exponentially many paths. We show how we proved it, rewrote the pattern and added RE2 and CI checks.