Search for packages
| purl | pkg:npm/semver@2.1.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1tme-dh4y-a3dq
Aliases: CVE-2015-8855 GHSA-x6fg-f45m-jf5q |
Regular Expression Denial of Service in semver Versions 4.3.1 and earlier of `semver` are affected by a regular expression denial of service vulnerability when extremely long version strings are parsed. |
Affected by 1 other vulnerability. |
|
VCID-m6ct-n9hk-h3g4
Aliases: GMS-2015-9 |
Regular Expression Denial of Service semver is vulnerable to regular expression denial of service when extremely long version strings are parsed. |
Affected by 1 other vulnerability. |
|
VCID-nahx-etfu-qqfq
Aliases: CVE-2022-25883 GHSA-c2qf-rxjj-qqgw |
semver vulnerable to Regular Expression Denial of Service Versions of the package semver before 7.5.2 on the 7.x branch, before 6.3.1 on the 6.x branch, and all other versions before 5.7.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||