If you take regex as user input, you should use RE2: https://github.com/google/re2 https://github.com/google/re2 Even without this vulnerability, some regexes

If you take regex as user input, you should use RE2: https://github.com/google/re2 https://github.com/google/re2 Even without this vulnerability, some regexes can be painfully slow.