Description
Fixed a CodeQL-flagged ReDoS vulnerability in PyThaiNLP’s ULMFiT URL parser.
Core Achievement
Resolved a regular-expression denial-of-service vulnerability in the ULMFiT preprocessing pipeline (PR #1400).
Technical Edge
Removed nested greedy quantification from URL matching to eliminate catastrophic backtracking while preserving the intended matching behavior.
Metric
Linear-time worst-case URL matching after the security fix.