redos‑db

A curated, machine-readable, self-verifying catalogue of real-world regular-expression denial-of-service (ReDoS) vulnerabilities.

How real-world ReDoS bugs actually get fixed › — a data view over the whole catalogue.

Most real-world ReDoS is quadratic, not exponential › — a short read on what these bugs really look like.