{"action":"Upgrade semver-regex to 3.1.3 or later.","affected":[{"fixed":"3.1.3","introduced":"0"},{"fixed":"4.0.1","introduced":"4.0.0"}],"component":"semver-regex","cve_ids":["CVE-2021-3795"],"ecosystem":"npm","epss":0.01517,"exploited":false,"fixed_versions":["3.1.3","4.0.1"],"ghsa_id":"GHSA-44c6-4v22-4mhx","id":"tcs_01M5KEZ4M4CPDGY5XHC5NQWTK0","modified_at":"2026-09-10T03:49:27.232553772Z","published_at":"2021-09-20T20:42:25Z","references":["https://osv.dev/vulnerability/GHSA-44c6-4v22-4mhx","https://nvd.nist.gov/vuln/detail/CVE-2021-3795","https://github.com/sindresorhus/semver-regex/commit/11c66245f4e1976dccc52977ed183696a21a3fd7","https://github.com/sindresorhus/semver-regex","https://huntr.dev/bounties/006624e3-35ac-448f-aab9-7b5183f30e28"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-44c6-4v22-4mhx","url":"https://osv.dev/vulnerability/GHSA-44c6-4v22-4mhx"}],"summary":"semver-regex Regular Expression Denial of Service (ReDOS)"}