CVE-2022-25883

CVE-2022-25883 is a Regular Expression Denial of Service (ReDoS) vulnerability affecting versions of the npmjs semver package prior to 7.5.2. An attacker can exploit this by providing specially crafted, untrusted user data to the new Range function, leading to a denial of service. With a CVSS score of 7.5 (HIGH), this vulnerability has a low attack complexity and requires no user interaction or privileges, allowing an unauthenticated attacker to cause a complete loss of availability. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.