high7.5
CVE-2015-8855
The semver package before 4.3.2 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expressio…
Impact
The semver package before 4.3.2 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReDoS)."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nodejs | Node.Js | through 4.3.1 |