Npmjs

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

Npmjs records in CISA KEV

No Npmjs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Npm 8 records MEDIUM Tar 3 records MEDIUM Arborist 2 records LOW Hosted-git-info 1 record LOW Npm-user-validate 1 record LOW Semver 1 record HIGH

Records

1 record in Semver · all components

TI-2022-09442 CVE-2022-25883 · GHSA-c2qf-rxjj-qqgw

Regular expression denial of service in semver

HIGH 72

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02761 Published 2023-06-21 Partial fix · 7.5.2, 6.3.1 +1 CWE-1333

Open these records in search →

Critical	1
High	13
Medium	2
Low	0
No CVSS	0