2 matches found
AZL-27208 CVE-2022-25883 affecting package nodejs18 for versions less than 18.16.0-3
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...
7.5CVSS6.7AI score0.02761EPSS
SaveExploits1References1
AZL-45168 CVE-2022-25883 affecting package nodejs-nodemon 2.0.3-5
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...
7.5CVSS6.7AI score0.02761EPSS
SaveExploits1References1
20