@storybook/semver
NPM
Releases1
Last Release
The semantic version parser used by npm for browser.
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| < 5.7.2, >= 6.0.0, < 6.3.1, = *, >= 7.0.0, < 7.5.3, >= 7.0.0, < 7.5.2, >= 2.0.0-alpha, < 5.7.2 | 5.3 MEDIUM | — | ||
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range. | ||||