ReDoS vulnerabilities are now far more likely to be exploited than other classes, and five detection tools disagree on which regexes are vulnerable.

arXiv 2609.10294 compares five public regex vulnerability detection tools plus one correction tool across three datasets, then analyzes every ReDoS entry in NVD against non-ReDoS entries. ReDoS is both more prevalent and much more likely to be exploited. The tools show substantial disagreement on individual regexes, so one clean scan is not evidence of anything. Run two tools and treat the disagreement set as your review queue.