[🐸 Frogbot] Update version of semver to [5.7.2]

[github-actions[bot]]

[](https://github.com/jfrog/frogbot#readme)

📦 Vulnerable Dependencies

✍️ Summary

| SEVERITY | CONTEXTUAL ANALYSIS | DIRECT DEPENDENCIES | IMPACTED DEPENDENCY | FIXED VERSIONS | | :---------------------: | :----------------------------------: | :----------------------------------: | :-----------------------------------: | :---------------------------------: | | 
High | Undetermined |ovsx:0.5.2

semver:7.3.8

@typescript-eslint/parser:5.59.1

keytar:7.9.0

vsce:2.15.0

@typescript-eslint/eslint-plugin:5.59.1

ts-loader:9.4.2 | semver:7.3.8 | [5.7.2]

[6.3.1]

[7.5.2] |

👇 Details

• Severity 🔥 High
• Contextual Analysis: Undetermined
• Package Name: semver
• Current Version: 7.3.8
• Fixed Versions: [5.7.2],[6.3.1],[7.5.2]
• CVE: CVE-2022-25883

Description:

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

---

[JFrog Frogbot](https://github.com/jfrog/frogbot#readme)