CWE-624
Executable Regular Expression Error
The product uses a regular expression that either (1) contains an executable component with user-controlled inputs, or (2) allows a user to enable execution by inserting pattern modifiers.
Impactr finds and proves whether CWE-624 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.