1 matches found
Regular Expression Denial Of Service (ReDoS)
semver is vulnerable to Regular Expression Denial Of Service ReDoS attacks. A malicious user is able to cause parsing slowdowns when untrusted user data is provided as a range via the function parseRange due to the usage of regex expression with inefficient time complexity...
7.5CVSS6.8AI score0.02761EPSS
SaveExploits1References7Affected Software19
20