CVE-2021-43307

Publication date

2022-06-01 16:47:38

Family

JFROG

State

PUBLISHED

Description

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the semver-regex npm package, when an attacker is able to supply arbitrary input to the test() method