Search for packages
| purl | pkg:deb/debian/node-ua-parser-js@0.7.14-1 |
| Next non-vulnerable version | 0.8.1+ds+~0.7.36-3 |
| Latest non-vulnerable version | 0.8.1+ds+~0.7.36-3 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6c98-q4en-3uek
Aliases: CVE-2020-7793 GHSA-394c-5j6w-4xmx |
ua-parser-js Regular Expression Denial of Service vulnerability The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info). |
Affected by 1 other vulnerability. |
|
VCID-j1g9-gab7-cbch
Aliases: CVE-2021-27292 GHSA-78cj-fxph-m83p |
Regular Expression Denial of Service (ReDoS) in ua-parser-js ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||