Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Semver-regex Project Component: Semver-regex Clear all filters
TI-2021-19300 CVE-2021-43307 · GHSA-4x5v-gmq8-25ch

Exponential ReDoS in semver-regex

Priority LOW 36

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the semver-regex npm package, when an attacker is able to supply arbitrary input to the test() method

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01558 Published 2022-06-01 Fixed in 3.1.4, 4.0.3 CWE-1333