All rules →
Rules / JavaScript / TypeScript
SHIELD-JS-017

Regex Denial of Service (ReDoS) — catastrophic backtracking

mediumJavaScript / TypeScriptCWE-1333CVSS 5.9

What it detects

Regex patterns with nested quantifiers may cause exponential backtracking on crafted input.

How to fix

Never construct regexes from user input. Use a safe regex library or validate input first.

Scan your repo freeFull documentation
Back to all rules
SHIELD-JS-017: Regex Denial of Service (ReDoS) — catastrophic backtracking — Zennoxa Shield