Semver vulnerabilities
We track 1 vulnerability in Semver products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 21, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Semver vulnerabilities
- 7.5 High severity
semver: Inefficient Regular Expression Complexity
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.