EUVD-2026-116196

Inefficient Regular Expression Complexity CWE-1333 in generateregex whatstk/whatsapp/parser.py in whatstk from 0.2.0 before 0.9.0 allows a party that supplies a chat export to consume the CPU of the process that parses it for an unbounded time, because the function builds the header regular...

CVE-2026-121577

The whatstk library (versions 0.2.0 through 0.9.0) is vulnerable to Inefficient Regular Expression Complexity (CWE-1333) in the generate_regex() function located in whatstk/whatsapp/parser.py. The vulnerability arises because the function constructs a header regular expression by replacing %x cod...