CVE-2022-25883 @ Npm-semver-6.3.0

[electricmonk]

Checkmarx (SCA): Vulnerable Package
Vulnerability: Read More about CVE-2022-25883
Checkmarx Project: electricmonk/ts-react-tdd
Repository URL: https://github.com/electricmonk/ts-react-tdd
Branch: main
Scan ID: e0708f2c-1083-45f2-a7cb-929f9b6a0c6c

---

The package semver versions prior to 5.7.2, 6.x through 6.3.0 and 7.x through 7.5.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function "new Range", when untrusted user data is provided as a range.

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: 6.3.1