Search for packages
| purl | pkg:deb/debian/node-semver@2.1.0-2 |
| Next non-vulnerable version | 5.3.0-1 |
| Latest non-vulnerable version | 7.6.1+~7.5.8-2 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1tme-dh4y-a3dq
Aliases: CVE-2015-8855 GHSA-x6fg-f45m-jf5q |
Regular Expression Denial of Service in semver Versions 4.3.1 and earlier of `semver` are affected by a regular expression denial of service vulnerability when extremely long version strings are parsed. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T00:07:32.750864+00:00 | Debian Oval Importer | Affected by | VCID-1tme-dh4y-a3dq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 38.4.0 |
| 2026-04-11T23:41:31.870310+00:00 | Debian Oval Importer | Affected by | VCID-1tme-dh4y-a3dq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 38.3.0 |
| 2026-04-08T23:13:59.944443+00:00 | Debian Oval Importer | Affected by | VCID-1tme-dh4y-a3dq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 38.1.0 |