Files
CVEs-PoC/2015/CVE-2015-8855.md
2025-09-29 21:09:30 +02:00

687 B

CVE-2015-8855

Description

The semver package before 4.3.2 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReDoS)."

POC

Reference

No PoCs from references.

Github