Vulnerable Regular Expression in docstring

[yetingli]

Type of Issue
Potential Regex Denial of Service (ReDoS)

Description
The vulnerable regular expression is located in

sphinx/sphinx/ext/napoleon/docstring.py

Line 34 in 31f26a0

_google_typed_arg_regex = re.compile(r'\s*(.+?)\s*\(\s*(.*[^\s]+)\s*\)')

The regex with quantified overlapping adjacency and can be exploited with the following string
" " * 5000 + "!"

I think you can limit the input length or modify this regex.

[tk0miya]

Thank you for reporting.
I posted #8224 to fix this. Please check it if you have time.

[yetingli]

Hi @tk0miya ,
Thank you for your reply. I think your fix is correct and safe :)