Lucene search

GHSA-C2QF-RXJJ-QQGW semver vulnerable to Regular Expression Denial of Service

🗓️ 21 Jun 2023 06:28:30Reported by GoogleType

osv🔗 osv.dev👁 163 Views

Semver package vulnerable to Regular Expression Denial of Service

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 129
RedHat Linux	Low: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.6.2 security updates and bug fixes	28 Aug 202418:01	–	redhat
RedHat Linux	Low: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.11.2 bug fixes and container updates	29 Aug 202416:23	–	redhat
RedHat Linux	Moderate: Red Hat Security Advisory: Logging Subsystem 5.7.4 - Red Hat OpenShift bug fix and security update	2 Aug 202313:49	–	redhat
RedHat Linux	Moderate: Red Hat Security Advisory: Migration Toolkit for Runtimes security, bug fix and enhancement update	7 Feb 202415:32	–	redhat
RedHat Linux	Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.8.2 security and bug fix update	15 Nov 202301:25	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Network Observability 1.4.0 for OpenShift	28 Sep 202302:59	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update	26 Sep 202314:59	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update	26 Sep 202315:05	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update	26 Sep 202314:56	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.13 security update on RHEL 7	5 Oct 202320:23	–	redhat

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-25883
github	www.github.com/npm/node-semver/pull/564
github	www.github.com/npm/node-semver/pull/585
github	www.github.com/npm/node-semver/pull/593
github	www.github.com/npm/node-semver/commit/2f8fd41487acf380194579ecb6f8b1bbfe116be0
github	www.github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441
github	www.github.com/npm/node-semver/commit/928e56d21150da0413a3333a3148b20e741a920c
github	www.github.com/npm/node-semver
github	www.github.com/npm/node-semver/blob/main/classes/range.js
github	www.github.com/npm/node-semver/blob/main/classes/range.js%23L97-L104

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Jun 2023 06:30Current

7.3High risk

Vulners AI Score7.3

CVSS35.3 - 7.5

EPSS0.00308

SSVC