high7.5
CVE-2021-3795
semver-regex Regular Expression Denial of Service (ReDOS)
Impact
npm `semver-regex` is vulnerable to Inefficient Regular Expression Complexity
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | semver-regex | < 3.1.3 | 3.1.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Semver-Regex Project | Semver-Regex | before 3.1.3 Version 4.0.0 |