npm/node-semver

npm/node-semver

GitHubGitHub
GitHubgithub.com
semver.npmjs.comsemver.npmjs.com
Releases117
Frequency1 month 2 weeks
Last Release
Stars5.43K
The semver parser for node (the one npm uses)
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-25883↗
5.3 MEDIUM—

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.