CVE-2022-25883 @ Npm-semver-5.7.1

**Vulnerable Package** issue exists @ **Npm\-semver\-5.7.1** in branch **main**

The package semver versions prior to 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

**Namespace:** westonphillips
**Repository:** CheckmarxOnePOV
**Repository Url:** https://github.com/westonphillips/CheckmarxOnePOV
**CxAST\-Project:** westonphillips/CheckmarxOnePOV
**CxAST platform scan:** [6a8170d0\-38fa\-4efc\-81df\-42628474102c](https://ast.checkmarx.net/projects/3cff8712-758c-4ce1-a688-3efc7bdda2d9/scans?id=6a8170d0-38fa-4efc-81df-42628474102c&branch=main)
**Branch:** main
**Application:** CheckmarxOnePOV
**Severity:** MEDIUM
**State:** NOT_IGNORED
**Status:** RECURRENT
**CWE:** CWE-1333


----
**Additional Info**
**Attack vector:** NETWORK
**Attack complexity:** LOW
**Confidentiality impact:** NONE
**Availability impact:** LOW


----
**References**
[Advisory](https://github.com/advisories/GHSA-c2qf-rxjj-qqgw)
[Commit](https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441)
[Pull request](https://github.com/npm/node-semver/pull/564)


Provide feedback

Saved searches

Use saved searches to filter your results more quickly

CVE-2022-25883 @ Npm-semver-5.7.1 #128

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development