There is 1 open security issue in bookworm.
1 issue left for the package maintainer to handle:
- CVE-2022-25883:
(needs triaging)
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.
You can find information about how to handle this issue in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/n/node-semver.png){kind=link}