Upgrading semver 5 to 6
Breaking5.7.2 → 6.3.1Breaking1Security1New5Fixed5
SecurityHigh · CVSS 7.5semver vulnerable to Regular Expression Denial of ServiceGHSA-c2qf-rxjj-qqgw · CVE-2022-25883 ↗
BreakingUpgrade verdict
1 breaking change and a security fix.
In plain terms
- The function that checks whether two version ranges overlap now gives different answers in some cases, so code relying on the old results may need updating.
- semver vulnerable to Regular Expression Denial of Service
Must act 2 items need code or config changes
What you must change
Breaking1
Fixes
intersects logic, a behavior change that may require callers to update their code and is released as a major version.intersectsSecurity1
semver vulnerable to Regular Expression Denial of Service
High · CVSS 7.5