Unknown · Tiny-Regex-C · CVE-2026-11478
**Name of the Vulnerable Software and Affected Versions**
kokke tiny-regex-c versions prior to f2632c6d9ed25272987471cdb8b70395c2460bdb
**Description**
A flaw in the Pattern Handler component affects the `matchstar()` function within the re.c file. This issue allows for inefficient regular expression complexity, which can be triggered via local execution.
**Recommendations**
As a temporary workaround, restrict the use of the `matchstar()` function until a fix is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.