Since any new features of PCRE will be added to PCRE2, and not to the PCRE 8.x series.
For current version of PCRE is vulnerable to denial-of-service (DoS) via a buffer overread triggered by \X characters in non-UTF strings.
Can the PCRE be updated to PCRE2 latest version?