Description
semver-regex is vulnerable to Inefficient Regular Expression Complexity
Remediation
References
https://github.com/sindresorhus/semver-regex/commit/11c66245f4e1976dccc52977ed183696a21a3fd7
https://huntr.dev/bounties/006624e3-35ac-448f-aab9-7b5183f30e28
Related Vulnerabilities
CVE-2020-13410 Vulnerability in npm package aedes
CVE-2023-0481 Vulnerability in maven package io.quarkus.resteasy.reactive:resteasy-reactive-common
CVE-2023-49798 Vulnerability in npm package @openzeppelin/contracts
CVE-2011-5063 Vulnerability in maven package org.apache.tomcat:catalina
CVE-2021-42550 Vulnerability in maven package ch.qos.logback:logback-core