Security Advisory
CVE-2022-25883
5.3
MEDIUM
Vulnerability Description
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.
Published Date
June 21, 2023
Official Source
NIST NVD Advisory