Lucene search
Veracode Vulnerability DatabaseVERACODE:35860HistoryJun 03, 2022 - 9:04 a.m.
Regular Expression Denial Of Service (ReDoS)
2022-06-0309:04:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
0.001 Low
EPSS
Percentile
37.0%
semver-regex is vulnerable to regular expression denial of service. The vulnerability exists in semverRegex function in index.js due to improper use of regular expressions which allows an attacker to cause a ReDos.
| CPE | Name | Operator | Version |
|---|---|---|---|
| semver-regex | le | 3.1.3 | |
| semver-regex | le | 4.0.2 | |
| semver-regex | le | 4.0.2 | |
| semver-regex | le | 3.1.2 | |
| semver-regex | le | 3.1.3 | |
| semver-regex | le | 4.0.2 | |
| semver-regex | le | 4.0.2 | |
| semver-regex | le | 3.1.2 |
Related
cve
cve
CVE-2021-43307
2022-06-02 14:15:30
cnvd
cnvd
npm semver-regex denial of service vulnerability
2022-06-09 00:00:00
nvd
nvd
CVE-2021-43307
2022-06-02 14:15:30
cvelist
cvelist
CVE-2021-43307 Exponential ReDoS in semver-regex
2022-05-29 00:00:00
osv
osv
CVE-2021-43307
2022-06-02 14:15:30
Regular expression denial of service in semver-regex
2022-06-03 00:01:00
github
github
Regular expression denial of service in semver-regex
2022-06-03 00:01:00
prion
prion
Input validation
2022-06-02 14:15:00
