Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2022-25883

nodejs-semver: Regular expression denial of service

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

CVSS 3.1 · 5.3 Medium EPSS 2.8% KEV · Not listed
Vendors
Npmjs Redhat
Products
Semver Acm Enterprise Linux and 7 more