GHSA-4x5v-gmq8-25chLow

Regular expression denial of service in semver-regex

Published
June 3, 2022
Last Modified
July 19, 2023

🔗 CVE IDs covered (1)

CVE-2021-43307 →

📋 Description

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the semver-regex npm package, when an attacker is able to supply arbitrary input to the test() method

🎯 Affected products2

  • npm/semver-regex:< 3.1.4
  • npm/semver-regex:>= 4.0.0, < 4.0.3

🔗 References (4)