43 matches found
08cms (=1.0.0), 24_hrs_js (=1.0.0) +5742 more potentially affected by CVE-2015-8855 via semver (>=1.0.7 <=4.3.1)
semver NPM version =1.0.7, =0.0.1, =0.0.2, =0.0.1, =0.11.6, =1.2.0, =0.1.3, =0.0.1, =0.0.11, =0.0.1, =1.0.0 and more Source cves: CVE-2015-8855 Source advisory: OSV:GHSA-X6FG-F45M-JF5Q...
Joyent Node.js semver denial of service vulnerability
Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. semver is a semantic version control specification module in npm. A denial of service vulnerability exists in Joyent Node.js semver, where the program fails to properly parse long version strings, allowing...