Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/ua-parser-js@0.5.2
purl pkg:npm/ua-parser-js@0.5.2
Next non-vulnerable version 0.7.24
Latest non-vulnerable version 1.0.33
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-6c98-q4en-3uek
Aliases:
CVE-2020-7793
GHSA-394c-5j6w-4xmx
ua-parser-js Regular Expression Denial of Service vulnerability The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).
0.7.23
Affected by 1 other vulnerability.
VCID-q32y-yvrx-wkby
Aliases:
CVE-2020-7733
GHSA-662x-fhqg-9p8v
Regular Expression Denial of Service in ua-parser-js The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.
0.7.22
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T21:15:05.297580+00:00 GitLab Importer Affected by VCID-6c98-q4en-3uek https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2020-7793.yml 38.4.0
2026-04-16T21:11:56.533878+00:00 GitLab Importer Affected by VCID-q32y-yvrx-wkby https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2020-7733.yml 38.4.0
2026-04-11T22:27:13.267952+00:00 GitLab Importer Affected by VCID-6c98-q4en-3uek https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2020-7793.yml 38.3.0
2026-04-11T22:23:52.141549+00:00 GitLab Importer Affected by VCID-q32y-yvrx-wkby https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2020-7733.yml 38.3.0
2026-04-02T22:38:54.922867+00:00 GitLab Importer Affected by VCID-6c98-q4en-3uek https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2020-7793.yml 38.1.0
2026-04-02T22:35:50.077360+00:00 GitLab Importer Affected by VCID-q32y-yvrx-wkby https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2020-7733.yml 38.1.0
2026-04-01T16:56:19.357688+00:00 GitLab Importer Affected by VCID-6c98-q4en-3uek https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2020-7793.yml 38.0.0
2026-04-01T16:53:04.585901+00:00 GitLab Importer Affected by VCID-q32y-yvrx-wkby https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2020-7733.yml 38.0.0