CVE-2026-77299

Regexp2: Unbounded memory amplification via large `{m}` quantifier on a zero-width subexpression

github.com/dlclark/regexp2

github.com/dlclark/regexp2: regexp2: Denial of Service via unbounded memory allocation during pattern matching

6. Nov 2026

Ausgewertete Quellen

• Microsoft
  Regexp2: Unbounded memory amplification via large `{m}` quantifier on a zero-width subexpression
• Red Hat
  Red Hat