What is GHSA-44c6-4v22-4mhx?

GHSA-44c6-4v22-4mhx is a security advisory published by GitHub Security Advisories with High severity. semver-regex Regular Expression Denial of Service (ReDOS)

Which CVE IDs does GHSA-44c6-4v22-4mhx cover?

GHSA-44c6-4v22-4mhx covers the following CVE IDs: CVE-2021-3795. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-44c6-4v22-4mhx?

GHSA-44c6-4v22-4mhx has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-44c6-4v22-4mhx?

GHSA-44c6-4v22-4mhx affects 2 products, including: npm/semver-regex:\u003c 3.1.3; npm/semver-regex:= 4.0.0.

GHSA-44c6-4v22-4mhxHighCVSS 7.5

semver-regex Regular Expression Denial of Service (ReDOS)

Vendor

GitHub Security Advisories

Published

September 20, 2021

Last Modified

July 11, 2023

🔗 CVE IDs covered (1)

CVE-2021-3795 →

📋 Description

npm semver-regex is vulnerable to Inefficient Regular Expression Complexity

🎯 Affected products2

npm/semver-regex:< 3.1.3
npm/semver-regex:= 4.0.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-3795
https://github.com/sindresorhus/semver-regex/commit/11c66245f4e1976dccc52977ed183696a21a3fd7
https://huntr.dev/bounties/006624e3-35ac-448f-aab9-7b5183f30e28
https://github.com/advisories/GHSA-44c6-4v22-4mhx