Qualified static finding recorded.
CodeVetter · local evidence export
Catastrophic backtracking regex (ReDoS) in TypeScript
codevetter-public-benchmark/ts-regex-dos
detected · high confidence
Verification
No exact-current runtime evidence is included.
No audience validation occurred.
Finding
regex dos
The regex uses a nested + quantifier ((...+)+) causing exponential backtracking on non-matching inputs; a long crafted string hangs the event loop and denies service to all other requests.
source.ts:4