Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in kokke tiny-regex-c up to f2632c6d9ed25272987471cdb8b70395c2460bdb. This vulnerability affects the function matchstar of the file re.c of the component Pattern Handler. This manipulation causes inefficient regular expression complexity. The attack is restricted to local execution. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-11478 A flaw has been found in kokke tiny-regex-c up to f2632c6d9ed25272987471cdb8b70395c2460bdb. This vulnerability affects the function matchstar of the file re.c of the … https://www.cve.org/CVERecord?id=CVE-2026-11478
Post summary
The post announces a newly discovered flaw in kokke tiny-regex-c impacting the 'matchstar' function, but provides no evidence of exploits, PoCs, or remediation steps.
Two newly listed flaws CVE-2026-11478 in kokke tiny-regex-c and CVE-2026-11455 in FoundationAgents MetaGPT allow local regex complexity abuse and remote command injection with public exploits, according to NVD data. https://threatcluster.io/cluster/new-vulnerabilities-disclosed-cve-2026-11478-and-cve-2026-11-da369dff
Post summary
The post announces two newly listed CVEs that enable regex complexity abuse and remote command injection, noting publicly available exploits but providing no PoC or patch details.
CVE-2026-11478 Regular Expression Denial of Service in Kokke Tiny-Regex-C Pattern Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11478
Post summary
The snippet identifies CVE-2026-11478 as a regex DoS vulnerability in Kokke Tiny-Regex-C, without any PoC, exploit, patch, or active exploitation claims.