From 8d78e4ed6172f8e3a4665c290efa41cc4d7f5ab8 Mon Sep 17 00:00:00 2001
From: Gareth Jones <Jones258@Gmail.com>
Date: Tue, 11 Jul 2023 10:45:36 +1200
Subject: [PATCH] Improve GHSA-c2qf-rxjj-qqgw

---
 .../GHSA-c2qf-rxjj-qqgw.json                  | 37 +++++++++++++------
 1 file changed, 25 insertions(+), 12 deletions(-)

diff --git a/advisories/github-reviewed/2023/06/GHSA-c2qf-rxjj-qqgw/GHSA-c2qf-rxjj-qqgw.json b/advisories/github-reviewed/2023/06/GHSA-c2qf-rxjj-qqgw/GHSA-c2qf-rxjj-qqgw.json
index 541e9cb62c0eb..c3461a8f3c00a 100644
--- a/advisories/github-reviewed/2023/06/GHSA-c2qf-rxjj-qqgw/GHSA-c2qf-rxjj-qqgw.json
+++ b/advisories/github-reviewed/2023/06/GHSA-c2qf-rxjj-qqgw/GHSA-c2qf-rxjj-qqgw.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c2qf-rxjj-qqgw",
-  "modified": "2023-07-10T22:04:25Z",
+  "modified": "2023-07-10T22:04:27Z",
   "published": "2023-06-21T06:30:28Z",
   "aliases": [
     "CVE-2022-25883"
   ],
   "summary": "semver vulnerable to Regular Expression Denial of Service",
-  "details": "Versions of the package semver before 7.5.2 on the 7.x branch as well as before 6.3.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.\n\n\n",
+  "details": "Versions of the package semver before 7.5.2 on the 7.x branch, before 6.3.1 on the 6.x branch, and all other versions before 5.7.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.\n\n\n",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -20,11 +20,6 @@
         "ecosystem": "npm",
         "name": "semver"
       },
-      "ecosystem_specific": {
-        "affected_functions": [
-          "semver.Range"
-        ]
-      },
       "ranges": [
         {
           "type": "ECOSYSTEM",
@@ -44,10 +39,24 @@
         "ecosystem": "npm",
         "name": "semver"
       },
-      "ecosystem_specific": {
-        "affected_functions": [
-          "semver.Range"
-        ]
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "6.0.0"
+            },
+            {
+              "fixed": "6.3.1"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "semver"
       },
       "ranges": [
         {
@@ -57,7 +66,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "6.3.1"
+              "fixed": "5.7.2"
             }
           ]
         }
@@ -77,6 +86,10 @@
       "type": "WEB",
       "url": "https://github.com/npm/node-semver/pull/585"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/npm/node-semver/pull/593"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441"