Post

An AI wrote (a+)+$ in half a second. That shape hung Cloudflare's whole network for 27 minutes in 2019, and it's already landed CVEs in ajv and minimatch. Semgrep catches it before merge. Copper Sun Brass bundles it as one of 12 scanners. Read more → https://brss.fyi/1f4d

brss.fyiWill Your AI Write A Regex That Hangs Your Server?Catastrophic backtracking turns one crafted input into a denial-of-service attack: real npm advisories and how to catch it before it ships.

0 reposts0 likes

No replies yet.