From a0203db168ad07c8abac9eb9a9d9e167ee16d7fe Mon Sep 17 00:00:00 2001 From: Sindre Sorhus Date: Sat, 11 Sep 2021 17:16:06 +0700 Subject: [PATCH 1/3] Fix ReDoS vulnerability backport --- index.js | 2 +- package.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/index.js b/index.js index 921f93d..e546fa6 100644 --- a/index.js +++ b/index.js @@ -1,2 +1,2 @@ 'use strict'; -module.exports = () => /(?<=^v?|\sv?)(?:(?:0|[1-9]\d*)\.){2}(?:0|[1-9]\d*)(?:-(?:0|[1-9]\d*|[\da-z-]*[a-z-][\da-z-]*)(?:\.(?:0|[1-9]\d*|[\da-z-]*[a-z-][\da-z-]*))*)?(?:\+[\da-z-]+(?:\.[\da-z-]+)*)?\b/gi; +module.exports = () => /(?:(?<=^v?|\sv?)(?:(?:0|[1-9]\d{0,9})\.){2}(?:0|[1-9]\d{0,9})(?:-(?:0|[1-9]\d*?|[\da-z-]*?[a-z-][\da-z-]*?){0,100}(?:\.(?:0|[1-9]\d*?|[\da-z-]*?[a-z-][\da-z-]*?))*?){0,100}(?:\+[\da-z-]+?(?:\.[\da-z-]+?)*?){0,100}\b){1,200}/gi; diff --git a/package.json b/package.json index 8993fe7..e97a2c3 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "semver-regex", - "version": "3.1.2", + "version": "3.1.3", "description": "Regular expression for matching semver versions", "license": "MIT", "repository": "sindresorhus/semver-regex", From 7712ba564d40da101cf2b2b33e6a910d9f2f57f4 Mon Sep 17 00:00:00 2001 From: Sindre Sorhus Date: Fri, 13 May 2022 17:01:29 +0700 Subject: [PATCH 2/3] Fix ReDoS vulnerability backport --- index.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.js b/index.js index e546fa6..9582281 100644 --- a/index.js +++ b/index.js @@ -1,2 +1,2 @@ 'use strict'; -module.exports = () => /(?:(?<=^v?|\sv?)(?:(?:0|[1-9]\d{0,9})\.){2}(?:0|[1-9]\d{0,9})(?:-(?:0|[1-9]\d*?|[\da-z-]*?[a-z-][\da-z-]*?){0,100}(?:\.(?:0|[1-9]\d*?|[\da-z-]*?[a-z-][\da-z-]*?))*?){0,100}(?:\+[\da-z-]+?(?:\.[\da-z-]+?)*?){0,100}\b){1,200}/gi; +module.exports = () => /(?:(?<=^v?|\sv?)(?:(?:0|[1-9]\d{0,9}?)\.){2}(?:0|[1-9]\d{0,9}?)(?:-(?:0|[1-9]\d*?|[\da-z-]*?[a-z-][\da-z-]*?){0,100}?(?:\.(?:0|[1-9]\d*?|[\da-z-]*?[a-z-][\da-z-]*?))*?){0,100}?(?:\+[\da-z-]+?(?:\.[\da-z-]+?)*?){0,100}?\b){1,200}?/gi; From 906cf402ca0509a17343c02527bcf3cc42194973 Mon Sep 17 00:00:00 2001 From: Sindre Sorhus Date: Fri, 13 May 2022 17:04:06 +0700 Subject: [PATCH 3/3] 3.1.4 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index e97a2c3..5f6ad28 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "semver-regex", - "version": "3.1.3", + "version": "3.1.4", "description": "Regular expression for matching semver versions", "license": "MIT", "repository": "sindresorhus/semver-regex",