ReDoS

acronym

web devsecurityprogramming

Stands for: Regular expression Denial of Service

A denial-of-service caused by a regular expression that takes catastrophically long on certain input.

Some regex patterns backtrack exponentially on crafted strings, so a single request can pin a CPU, turning an innocent validation into a ReDoS vulnerability. The fix is safer patterns or a linear-time regex engine.

Also known as: redos, catastrophic backtracking

All glossary entries