The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-nodemonUpgrade nodejsUpgrade nodejs-packaging-bundlerUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-packaging | Sep 28, 2023 | Jun 21, 2023 |
| Amazon_linux_2023 | — | Upgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-libs-debuginfoUpgrade nodejs-docsUpgrade nodejs-libsUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-develUpgrade v8-develUpgrade nodejs-debuginfo | Feb 17, 2025 | Jun 21, 2023 |
| Atlassian Bitbucket | — | Upgrade Atlassian Bitbucket to the latest version | Mar 18, 2026 | Mar 17, 2026 |
| Atlassian Jira | — | Upgrade to the latest version of Atlassian JIRA | Mar 18, 2026 | Mar 17, 2026 |
| Centos_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade nodejs-packaging-bundlerUpgrade npmUpgrade nodejs | Sep 27, 2023 | Jun 21, 2023 |
| Debian | — | No solution existsUpgrade node-semver | May 15, 2025 | Jun 21, 2023 |
| Oracle_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade npmUpgrade nodejs-packaging-bundlerUpgrade nodejsUpgrade nodejs-packaging | Sep 28, 2023 | Jun 21, 2023 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jun 21, 2023 |
| Redhat_linux | — | Upgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejsNo solution existsUpgrade nodejs-packaging-bundlerUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade nodejs-debuginfoUpgrade nodejs-develUpgrade npm | Sep 27, 2023 | Jun 21, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Jun 21, 2023 |
| Splunk | — | — | Sep 30, 2025 | Jun 21, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub