OWASP: Regular expression Denial of Service - ReDoS.

Wikipedia: ReDoS.

Wikipedia: Time complexity.

James Kirrage, Asiri Rathnayake, Hayo Thielecke: Static Analysis for Regular Expression Denial-of-Service Attack.