← CVE Intelligence

CVE-2021-43307

Exponential ReDoS in semver-regex PUBLISHED

Description (CNA)

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the semver-regex npm package, when an attacker is able to supply arbitrary input to the test() method

Affected (CNA)

Vendor / productVersions
semver-regex / semver-regexaffected unspecified before 3.1.4

CWE

CWE-1333

References

ADP enrichment

CVE

No English description supplied.