{"action":"Upgrade semver-regex to 3.1.4 or later.","affected":[{"fixed":"3.1.4","introduced":"0"},{"fixed":"4.0.3","introduced":"4.0.0"}],"component":"semver-regex","cve_ids":["CVE-2021-43307"],"ecosystem":"npm","epss":0.01558,"exploited":false,"fixed_versions":["3.1.4","4.0.3"],"ghsa_id":"GHSA-4x5v-gmq8-25ch","id":"tcs_01M5KF1WGA5YKVH9TYZXZNMNEM","modified_at":"2026-09-10T03:49:43.854292802Z","published_at":"2022-06-03T00:01:00Z","references":["https://osv.dev/vulnerability/GHSA-4x5v-gmq8-25ch","https://nvd.nist.gov/vuln/detail/CVE-2021-43307","https://github.com/sindresorhus/semver-regex/commit/d8ba39a528c1027c43ab23f12eec28ca4d40dd0c","https://github.com/sindresorhus/semver-regex","https://research.jfrog.com/vulnerabilities/semver-regex-redos-xray-211349"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-4x5v-gmq8-25ch","url":"https://osv.dev/vulnerability/GHSA-4x5v-gmq8-25ch"}],"summary":"Regular expression denial of service in semver-regex"}