Known vulnerabilities in Semver-regex
Vendor:
sindresorhus
Software:
Semver-regex
Software CPE:
cpe:2.3::sindresorhus:semver-regex:*:*:*:*:*:*:*:*
Website:
https://www.npmjs.com/~sindresorhus
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU109182 - Inefficient Regular Expression Complexity CVE-2021-3795 |
CWE-1333 | High | 3.1.3 | 14.05.2025 |
SB2021091549 SB2022111063 SB2021120933 |
||
| #VU109181 - Inefficient Regular Expression Complexity CVE-2021-43307 |
CWE-1333 | High | 3.1.4, 4.0.3 | 14.05.2025 |
SB2022060244 SB2022111063 |