The "regexp-limit" setting:

Limit the size of the bytecode used to implement a regular expression to this many steps. It is important to limit this to avoid possible DoS attacks.