semver
7.8.5 · 19 Jun 2026ISC750.1M / weekRepositoryHomepagenpmAtom feed
Upgrading semver from 1.0.6 to 4.3.2
43 releases in betweennotes for 0
4.0.0, 3.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
- ?
- changes to make
- 1
- advisory fixed
- ?
- new
- ?
- fixes
Counted from 0 of 43 release notes. Advisories are counted from the advisory database, in full.
Security
1 advisory still affects 4.3.2
- semver vulnerable to Regular Expression Denial of Servicehigh · GHSA-c2qf-rxjj-qqgw
Upgrading to 5.7.2 clears it.
Fixes 1 advisory affecting 1.0.6
- Regular Expression Denial of Service in semverhigh · GHSA-x6fg-f45m-jf5q