Semver-regex Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Semver-regex Project records in CISA KEV

No Semver-regex Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Semver-regex 2 records LOW

Records

2 records

TI-2021-19300 CVE-2021-43307 · GHSA-4x5v-gmq8-25ch

Exponential ReDoS in semver-regex

LOW 36

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the semver-regex npm package, when an attacker is able to supply arbitrary input to the test() method

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01558 Published 2022-06-01 Fixed in 3.1.4, 4.0.3 CWE-1333

TI-2021-02726 CVE-2021-3795 · GHSA-44c6-4v22-4mhx

Inefficient Regular Expression Complexity in sindresorhus/semver-regex

LOW 36

semver-regex is vulnerable to Inefficient Regular Expression Complexity

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01517 Published 2021-09-15 Partial fix · 4.0.1, 3.1.3 CWE-1333

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0