Vulnerabilities in sindresorhus

4 results

CVE-2021-3795HIGHInefficient Regular Expression Complexity in sindresorhus/semver-regexEPSS 1.5%CVE-2026-119025HIGHopen 7.2.0 before 11.0.0 OS Command Injection via PowerShell on WindowsEPSS 1.4%CVE-2026-31808MEDIUMfile-type affected by infinite loop in ASF parser on malformed input with zero-size sub-headerEPSS 0.4%CVE-2026-32630MEDIUMfile-type affected by ZIP Decompression Bomb DoS via [Content_Types].xml entryEPSS 0.3%