CVE-2026-62326: Python Regex Missing Timeout Redos

Regular expression compiled from dynamic input is executed without enforcing a timeout. Untrusted regex patterns can cause catastrophic backtracking and Denial of Service (ReDoS). Pass `timeout=...` to regex execution methods or use a safe execution wrapper.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-62326-python-regex-missing-timeout-redos --engine opengrep

Description

Regular expression compiled from dynamic input is executed without enforcing a timeout. Untrusted regex patterns can cause catastrophic backtracking and Denial of Service (ReDoS). Pass `timeout=...` to regex execution methods or use a safe execution wrapper.