Is it Go's regexp package vulnerable to ReDoS?
blog.michaelhidalgo.info