Tootfinder

Do you use LLMs to generate regular expressions? We do, too! Do you *review* your regexes? Is that frustrating? How can we put humans in the loop better, doing relatively few, meaningful tasks? Please try out our new tool PICK:regex, available for VSCode!
https://blog.brownplt.org/2025/12/11/p

Repairing Regex Vulnerabilities via Localization-Guided Instructions
Sicheol Sung, Joonghyuk Hahn, Yo-Sub Han
https://arxiv.org/abs/2510.09037 https://arxi…

Repairing Regex Vulnerabilities via Localization-Guided Instructions
Regular expressions (regexes) are foundational to modern computing for critical tasks like input validation and data parsing, yet their ubiquity exposes systems to regular expression denial of service (ReDoS), a vulnerability requiring automated repair methods. Current approaches, however, are hampered by a trade-off. Symbolic, rule-based system are precise but fails to repair unseen or complex vulnerability patterns. Conversely, large language models (LLMs) possess the necessary generalizabili…