CVE-2021-3795

HIGH

semver-regex - Inefficient Regular Expression Complexity

Title source: llm

semver-regex is vulnerable to Inefficient Regular Expression Complexity

Core 2

Core References

Exploit, Patch, Third Party Advisory x_refsource_confirm

Patch, Third Party Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0047

EPSS Percentile 64.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-1333

Status published

Products (3)

npm/semver-regex 0 - 3.1.3npm

semver-regex_project/semver-regex 4.0.0

semver-regex_project/semver-regex < 3.1.3

Published Sep 15, 2021

Tracked Since Feb 18, 2026