catastrophic-backtracking

Regex DDoS (ReDoS): How Catastrophic Backtracking Takes Down a Service

A regex DDoS, or ReDoS, weaponizes a slow regular expression so a short input pins a CPU core for seconds or minutes. Here is why it happens and how to detect and fix it.