{"action":"Upgrade semver to 4.3.2 or later.","affected":[{"fixed":"4.3.2","introduced":"1.0.4"}],"component":"semver","cve_ids":["CVE-2015-8855"],"ecosystem":"npm","epss":0.06887,"exploited":false,"fixed_versions":["4.3.2"],"ghsa_id":"GHSA-x6fg-f45m-jf5q","id":"tcs_01M5KGH50J7W6DXFD9Z0GY9WAA","modified_at":"2026-03-04T15:06:31.969299Z","published_at":"2017-10-24T18:33:36Z","references":["https://osv.dev/vulnerability/GHSA-x6fg-f45m-jf5q","https://nvd.nist.gov/vuln/detail/CVE-2015-8855","https://github.com/github/advisory-database/pull/7102","https://github.com/npm/node-semver/commit/5c4c9f6e26c7052a42b5ced2a7481c5c9b4363a0","https://github.com/npm/node-semver/commit/c80180d8341a8ada0236815c29a2be59864afd70","https://github.com/advisories/GHSA-x6fg-f45m-jf5q","https://github.com/npm/node-semver","https://www.npmjs.com/advisories/31","https://www.owasp.org/index.php/Regular_expression_Denial_of_Service_-_ReDoS","http://www.openwall.com/lists/oss-security/2016/04/20/11","http://www.securityfocus.com/bid/86957"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-x6fg-f45m-jf5q","url":"https://osv.dev/vulnerability/GHSA-x6fg-f45m-jf5q"}],"summary":"Regular Expression Denial of Service in semver"}