sindresorhus/semver-regex · Security
Regular expression denial of service in semver-regex
- GHSA ID
- GHSA-4x5v-gmq8-25ch
- CVE ID
- CVE-2021-43307
- Severity
- low
- Published
- Updated
Description
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the semver-regex npm package, when an attacker is able to supply arbitrary input to the test() method
CWEs
- CWE-1333 · Inefficient Regular Expression Complexity