Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/node-semver@7.6.1%2B~7.5.8-2?distro=trixie
Typedeb
Namespacedebian
Namenode-semver
Version7.6.1+~7.5.8-2
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version7.7.4+~cs9.7.4-1
Latest_non_vulnerable_version7.7.4+~cs9.7.4-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-hu38-keee-9uaz
vulnerability_id VCID-hu38-keee-9uaz
summary 
semver vulnerable to Regular Expression Denial of Service
Versions of the package semver before 7.5.2 on the 7.x branch, before 6.3.1 on the 6.x branch, and all other versions before 5.7.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-25883.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-25883.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-25883
reference_id
reference_type
scores
0
value 0.00598
scoring_system epss
scoring_elements 0.69774
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-25883
2
reference_url https://github.com/npm/node-semver
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver
3
reference_url https://github.com/npm/node-semver/blob/main/classes/range.js%23L97-L104
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver/blob/main/classes/range.js%23L97-L104
4
reference_url https://github.com/npm/node-semver/blob/main/classes/range.js#L97-L104
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver/blob/main/classes/range.js#L97-L104
5
reference_url https://github.com/npm/node-semver/blob/main/internal/re.js%23L138
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver/blob/main/internal/re.js%23L138
6
reference_url https://github.com/npm/node-semver/blob/main/internal/re.js%23L160
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver/blob/main/internal/re.js%23L160
7
reference_url https://github.com/npm/node-semver/blob/main/internal/re.js#L138
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver/blob/main/internal/re.js#L138
8
reference_url https://github.com/npm/node-semver/blob/main/internal/re.js#L160
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver/blob/main/internal/re.js#L160
9
reference_url https://github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0
10
reference_url https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441
11
reference_url https://github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c
12
reference_url https://github.com/npm/node-semver/pull/564
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver/pull/564
13
reference_url https://github.com/npm/node-semver/pull/585
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver/pull/585
14
reference_url https://github.com/npm/node-semver/pull/593
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver/pull/593
15
reference_url https://security.netapp.com/advisory/ntap-20241025-0004
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20241025-0004
16
reference_url https://security.snyk.io/vuln/SNYK-JS-SEMVER-3247795
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.snyk.io/vuln/SNYK-JS-SEMVER-3247795
17
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2216475
reference_id 2216475
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2216475
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-25883
reference_id CVE-2022-25883
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-25883
19
reference_url https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
reference_id GHSA-c2qf-rxjj-qqgw
reference_type
scores
url https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
20
reference_url https://access.redhat.com/errata/RHSA-2023:4341
reference_id RHSA-2023:4341
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4341
21
reference_url https://access.redhat.com/errata/RHSA-2023:5360
reference_id RHSA-2023:5360
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5360
22
reference_url https://access.redhat.com/errata/RHSA-2023:5361
reference_id RHSA-2023:5361
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5361
23
reference_url https://access.redhat.com/errata/RHSA-2023:5362
reference_id RHSA-2023:5362
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5362
24
reference_url https://access.redhat.com/errata/RHSA-2023:5363
reference_id RHSA-2023:5363
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5363
25
reference_url https://access.redhat.com/errata/RHSA-2023:5379
reference_id RHSA-2023:5379
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5379
26
reference_url https://access.redhat.com/errata/RHSA-2023:7222
reference_id RHSA-2023:7222
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7222
27
reference_url https://access.redhat.com/errata/RHSA-2024:0719
reference_id RHSA-2024:0719
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0719
28
reference_url https://access.redhat.com/errata/RHSA-2024:5955
reference_id RHSA-2024:5955
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:5955
29
reference_url https://access.redhat.com/errata/RHSA-2024:6044
reference_id RHSA-2024:6044
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:6044
30
reference_url https://access.redhat.com/errata/RHSA-2025:19094
reference_id RHSA-2025:19094
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19094
fixed_packages
0
url pkg:deb/debian/node-semver@7.5.4%2B~7.5.0-1?distro=trixie
purl pkg:deb/debian/node-semver@7.5.4%2B~7.5.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-semver@7.5.4%252B~7.5.0-1%3Fdistro=trixie
1
url pkg:deb/debian/node-semver@7.6.1%2B~7.5.8-2?distro=trixie
purl pkg:deb/debian/node-semver@7.6.1%2B~7.5.8-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-semver@7.6.1%252B~7.5.8-2%3Fdistro=trixie
2
url pkg:deb/debian/node-semver@7.7.4%2B~cs9.7.4-1?distro=trixie
purl pkg:deb/debian/node-semver@7.7.4%2B~cs9.7.4-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-semver@7.7.4%252B~cs9.7.4-1%3Fdistro=trixie
aliases CVE-2022-25883, GHSA-c2qf-rxjj-qqgw
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hu38-keee-9uaz
1
url VCID-rjwg-cp2a-kfg8
vulnerability_id VCID-rjwg-cp2a-kfg8
summary 
Regular Expression Denial of Service
semver is vulnerable to regular expression denial of service ([ReDoS](https://www.owasp.org/index.php/Regular_expression_Denial_of_Service_-_ReDoS)) when extremely long version strings are parsed.

"The Regular expression Denial of Service (ReDoS) is a Denial of Service attack, that exploits the fact that most Regular Expression implementations may reach extreme situations that cause them to work very slowly (exponentially related to input size). An attacker can then cause a program using a Regular Expression to enter these extreme situations and then hang for a very long time." [1]
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8855.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8855.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8855
reference_id
reference_type
scores
0
value 0.01092
scoring_system epss
scoring_elements 0.78295
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8855
2
reference_url https://github.com/github/advisory-database/pull/7102
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/github/advisory-database/pull/7102
3
reference_url https://github.com/npm/node-semver
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver
4
reference_url https://github.com/npm/node-semver/commit/5c4c9f6e26c7052a42b5ced2a7481c5c9b4363a0
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver/commit/5c4c9f6e26c7052a42b5ced2a7481c5c9b4363a0
5
reference_url https://github.com/npm/node-semver/commit/c80180d8341a8ada0236815c29a2be59864afd70
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/npm/node-semver/commit/c80180d8341a8ada0236815c29a2be59864afd70
6
reference_url https://github.com/npm/npm/releases/tag/v2.7.5
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements
url https://github.com/npm/npm/releases/tag/v2.7.5
7
reference_url https://www.npmjs.com/advisories/31
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.npmjs.com/advisories/31
8
reference_url https://www.owasp.org/index.php/Regular_expression_Denial_of_Service_-_ReDoS
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.owasp.org/index.php/Regular_expression_Denial_of_Service_-_ReDoS
9
reference_url http://www.openwall.com/lists/oss-security/2016/04/20/11
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2016/04/20/11
10
reference_url http://www.securityfocus.com/bid/86957
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/86957
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1209496
reference_id 1209496
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1209496
12
reference_url https://github.com/nodejs/security-wg/blob/main/vuln/npm/31.json
reference_id 31
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements
url https://github.com/nodejs/security-wg/blob/main/vuln/npm/31.json
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8855
reference_id CVE-2015-8855
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-8855
14
reference_url https://github.com/advisories/GHSA-x6fg-f45m-jf5q
reference_id GHSA-x6fg-f45m-jf5q
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-x6fg-f45m-jf5q
fixed_packages
0
url pkg:deb/debian/node-semver@5.3.0-1?distro=trixie
purl pkg:deb/debian/node-semver@5.3.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-semver@5.3.0-1%3Fdistro=trixie
1
url pkg:deb/debian/node-semver@7.3.4-1?distro=trixie
purl pkg:deb/debian/node-semver@7.3.4-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hu38-keee-9uaz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-semver@7.3.4-1%3Fdistro=trixie
2
url pkg:deb/debian/node-semver@7.3.5%2B~7.3.9-2?distro=trixie
purl pkg:deb/debian/node-semver@7.3.5%2B~7.3.9-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hu38-keee-9uaz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-semver@7.3.5%252B~7.3.9-2%3Fdistro=trixie
3
url pkg:deb/debian/node-semver@7.6.1%2B~7.5.8-2?distro=trixie
purl pkg:deb/debian/node-semver@7.6.1%2B~7.5.8-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-semver@7.6.1%252B~7.5.8-2%3Fdistro=trixie
4
url pkg:deb/debian/node-semver@7.7.4%2B~cs9.7.4-1?distro=trixie
purl pkg:deb/debian/node-semver@7.7.4%2B~cs9.7.4-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-semver@7.7.4%252B~cs9.7.4-1%3Fdistro=trixie
aliases CVE-2015-8855, GHSA-x6fg-f45m-jf5q
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rjwg-cp2a-kfg8
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/node-semver@7.6.1%252B~7.5.8-2%3Fdistro=trixie