Skip to content
OpenAdvisories

Package · Debian

golang-github-dlclark-regexp2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-77299

    Regexp2: Unbounded memory amplification via large `{m}` quantifier on a zero-width subexpression

    Regexp2 is a feature-rich RegExp engine for Go. Prior to version 2.3.0, when regexp2 compiles and matches a pattern containing a large fixed-count quantifier applied to a zero-width subexpression — e.g. (?:){50000000} — the match engine executes the empty loo…

    dlclark regexp2 gh dasel Debian Ubuntu Azure Linux