AIKIDO-2026-10010

TL;DR

Affected versions of this package use inefficient regular expression patterns in the urlMatcher functions. These patterns can cause excessive backtracking, making the application vulnerable to regular expression denial of service (ReDos). An attacker can exploit this by providing specially crafted input that triggers high computational overhead, potentially leading to severe performance degradation, service outages, or denial-of-service conditions.