Inefficient Regular Expression Complexity

Summary

PowSyBl (Power System Blocks) is a framework to build power system oriented software. In "com.powsybl:powsybl-iidm-criteria" versions 6.3.0-alpha-1 through 6.7.1 and "com.powsybl:powsybl-contingency-api" versions 5.0.0-RC1 through 6.2.4, there is a potential polynomial Regular Expression Denial of Service (ReDoS) vulnerability in the "RegexCriterion" class. This class compiles and evaluates an unvalidated, user-supplied regular expression against the identifier of an "Identifiable" object via "Pattern.compile(regex).matcher(id).find()". If successfully exploited, a malicious actor can cause significant CPU exhaustion through repeated or recursive "filter(...)" calls, especially if performed over large network models or filtering operations.