Does it possible to update semver depcy from anything to 7.5.2?

[dc185334]

I have no issues with such npm overrides in my package.json, but it is still my case:

    "[email protected]": "7.5.2",
    "[email protected]": {
      "[email protected]": "7.5.2"
    },
    "[email protected]": {
      "[email protected]": "7.5.2"
    }

[rpodwika]

semver 5.4.1 seem to have CVE https://www.mend.io/vulnerability-database/CVE-2022-25883 any chane to update that dependency?

[gutierrezj2]

having same issue +1

[Regnised]

Having the snyk issue
Regular Expression Denial of Service (ReDoS) [High Severity][https://security.snyk.io/vuln/SNYK-JS-SEMVER-3247795] in [email protected]
introduced by [email protected] > [email protected] > [email protected] > [email protected] and 1 other path(s)
This issue was fixed in versions: 7.5.2

[dc185334]

7.5.2 force resolution works like a charm for the last two weeks. Just letting you to know.

[rohitkumarcs]

What is the plan to release the fix of this issue anytime soon?

[rsshilli]

There's a pull request (#81) that's been sitting there for a month. I'm guessing the author has abandoned this project :-(.