github-starred/semver
2
0
Fork 0
mirror of https://github.com/semver/semver.git synced 2026-07-11 03:53:53 -05:00
Code Issues 1.0k Packages Projects Releases 4 Wiki Activity

[GH-ISSUE #977] Getting Semver Vercaode vulnarability #2336

New Issue
Closed
opened 2026-04-20 10:22:02 -05:00 by GiteaMirror · 1 comment
GiteaMirror commented 2026-04-20 10:22:02 -05:00
Owner
Copy Link

Originally created by @SanthoshReddyTR on GitHub (Oct 11, 2023).
Original GitHub issue: https://github.com/semver/semver/issues/977

Hi Team,
In our project we are getting semver vulnerability when we are updating semver 6.3.1/7.5.2/7.5.4 through,still it is picking 7.3.5 version in veracode scan.
Please find the below details
Angular CLI version 13.2.3
Angular core 13.2.2
Node 14.15.0
After updating node to 14.17.3 also same scan issue.

Please find the below screen shots and guide me on this semver vulnerability.
image
image

Originally created by @SanthoshReddyTR on GitHub (Oct 11, 2023). Original GitHub issue: https://github.com/semver/semver/issues/977 Hi Team, In our project we are getting semver vulnerability when we are updating semver 6.3.1/7.5.2/7.5.4 through,still it is picking 7.3.5 version in veracode scan. Please find the below details Angular CLI version 13.2.3 Angular core 13.2.2 Node 14.15.0 After updating node to 14.17.3 also same scan issue. Please find the below screen shots and guide me on this semver vulnerability. ![image](https://github.com/semver/semver/assets/102598539/c1b0f610-a844-4210-8c28-a7adf00e1ab5) ![image](https://github.com/semver/semver/assets/102598539/b0412256-04ba-471a-b145-a0b483efacf9)
GiteaMirror commented 2026-04-20 10:22:04 -05:00
Author
Owner
Copy Link

@ljharb commented on GitHub (Oct 11, 2023):

I think you meant to file this on node-semver, not this repo.

<!-- gh-comment-id:1756549185 --> @ljharb commented on GitHub (Oct 11, 2023): I think you meant to file this on node-semver, not this repo.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
consensus seeking
duplicate
extend
layout
pull-request
Mirrored from GitHub Pull Request
 question
RFC
spelling/grammar
staled
update
waiting for PR
won't fix
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/semver#2336
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?