Security advisory for the regex crate (CVE-2022-24713) | Rust Blog

This is a cross-post of the official security advisory. The official advisory contains a signed version with our PGP key, as well. The Rust Security Response WG was notified that the regex crate did not properly limit the complexity of the regular expressions (regex) it parses. An attacker could use this security issue to perform a denial of service, by sending a specially crafted regex to a servi

[shunkeen]

ReDos（脆弱な正規表現を利用することで起こるDoS）の話かな？＞“An attacker could use this security issue to perform a denial of service, by sending a specially crafted regex to a service accepting untrusted regexes.”