Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/ua-parser-js@0.7.23
purl pkg:npm/ua-parser-js@0.7.23
Next non-vulnerable version 0.7.24
Latest non-vulnerable version 1.0.33
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-j1g9-gab7-cbch
Aliases:
CVE-2021-27292
GHSA-78cj-fxph-m83p
Regular Expression Denial of Service (ReDoS) in ua-parser-js ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.
0.7.24
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-6c98-q4en-3uek ua-parser-js Regular Expression Denial of Service vulnerability The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info). CVE-2020-7793
GHSA-394c-5j6w-4xmx

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T21:18:57.542438+00:00 GitLab Importer Affected by VCID-j1g9-gab7-cbch https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2021-27292.yml 38.4.0
2026-04-16T21:15:05.402750+00:00 GitLab Importer Fixing VCID-6c98-q4en-3uek https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2020-7793.yml 38.4.0
2026-04-11T22:31:14.426745+00:00 GitLab Importer Affected by VCID-j1g9-gab7-cbch https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2021-27292.yml 38.3.0
2026-04-11T22:27:13.391549+00:00 GitLab Importer Fixing VCID-6c98-q4en-3uek https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2020-7793.yml 38.3.0
2026-04-02T22:42:37.306560+00:00 GitLab Importer Affected by VCID-j1g9-gab7-cbch https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2021-27292.yml 38.1.0
2026-04-02T22:38:55.025991+00:00 GitLab Importer Fixing VCID-6c98-q4en-3uek https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2020-7793.yml 38.1.0
2026-04-01T17:00:18.632932+00:00 GitLab Importer Affected by VCID-j1g9-gab7-cbch https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2021-27292.yml 38.0.0
2026-04-01T16:56:19.478833+00:00 GitLab Importer Fixing VCID-6c98-q4en-3uek https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2020-7793.yml 38.0.0
2026-04-01T15:59:33.548865+00:00 GHSA Importer Fixing VCID-6c98-q4en-3uek https://github.com/advisories/GHSA-394c-5j6w-4xmx 38.0.0
2026-04-01T13:06:05.711195+00:00 GithubOSV Importer Fixing VCID-6c98-q4en-3uek https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-394c-5j6w-4xmx/GHSA-394c-5j6w-4xmx.json 38.0.0