semver
7.8.5 · 19 Jun 2026ISC750.1M / weekRepositoryHomepagenpmAtom feed
Upgrading semver from 4.2.0 to 5.7.2
25 releases in betweennotes for 1
5.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
- ?
- changes to make
- 2
- advisories fixed
- ?
- new
- 1+
- fix
Counted from 1 of 25 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 2 advisories affecting 4.2.0
- semver vulnerable to Regular Expression Denial of Servicehigh · GHSA-c2qf-rxjj-qqgw
- Regular Expression Denial of Service in semverhigh · GHSA-x6fg-f45m-jf5q
Release by release
- fixed
Better handling of whitespace (#585) (@joaomoreno, @lukekarrys)
- fixed
4.2.1 – 5.7.124 releases, no release note