semver
7.8.5 · 19 Jun 2026ISC750.1M / weekRepositoryHomepagenpmAtom feed
Upgrading semver from 2.2.1 to 5.7.2
36 releases in betweennotes for 1
5.0.0, 4.0.0, 3.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
- ?
- changes to make
- 2
- advisories fixed
- ?
- new
- 1+
- fix
Counted from 1 of 36 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 2 advisories affecting 2.2.1
- semver vulnerable to Regular Expression Denial of Servicehigh · GHSA-c2qf-rxjj-qqgw
- Regular Expression Denial of Service in semverhigh · GHSA-x6fg-f45m-jf5q
Release by release
- fixed
Better handling of whitespace (#585) (@joaomoreno, @lukekarrys)
- fixed
2.3.0 – 5.7.135 releases, no release note