semver-regex

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 5.9

CVE-2021-43307

Exponential ReDoS in semver-regex

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the semver-regex npm package, when an attacker is able to supply arbitrary input to the test() method

semver-regex semver-regex semver-regex npm

Jun 1, 2022
High 7.5

CVE-2021-3795

Inefficient Regular Expression Complexity in sindresorhus/semver-regex

semver-regex is vulnerable to Inefficient Regular Expression Complexity

sindresorhus sindresorhus/semver-regex semver-regex npm

Sep 15, 2021