calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) in htmlpreprocessrules in ebooks/conversion/preprocess.py.
{ "urgency": "not yet assigned" }