Lucene search
+L

1 matches found

Veracode
Veracode
added 2023/06/29 11:12 a.m.77 views

Regular Expression Denial Of Service (ReDoS)

semver is vulnerable to Regular Expression Denial Of Service ReDoS attacks. A malicious user is able to cause parsing slowdowns when untrusted user data is provided as a range via the function parseRange due to the usage of regex expression with inefficient time complexity...

7.5CVSS6.8AI score0.02761EPSS
SaveExploits1References7Affected Software19
Rows per page
Query Builder