Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/ua-parser-js@0.7.33
purl pkg:npm/ua-parser-js@0.7.33
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-jzj3-ddrr-u7hd ReDoS Vulnerability in ua-parser-js version ### Description: A regular expression denial of service (ReDoS) vulnerability has been discovered in `ua-parser-js`. ### Impact: This vulnerability bypass the library's `MAX_LENGTH` input limit prevention. By crafting a very-very-long user-agent string with specific pattern, an attacker can turn the script to get stuck processing for a very long time which results in a denial of service (DoS) condition. ### Affected Versions: From version `0.7.30` to before versions `0.7.33` / `1.0.33`. ### Patches: A patch has been released to remove the vulnerable regular expression, update to version `0.7.33` / `1.0.33` or later. ### References: [Regular expression Denial of Service - ReDoS](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS) ### Credits: Thanks to @Snyk who first reported the issue. CVE-2022-25927
GHSA-fhg7-m89q-25r3
GMS-2023-120

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T22:20:22.853015+00:00 GitLab Importer Fixing VCID-jzj3-ddrr-u7hd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2022-25927.yml 38.4.0
2026-04-11T23:38:19.231828+00:00 GitLab Importer Fixing VCID-jzj3-ddrr-u7hd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2022-25927.yml 38.3.0
2026-04-02T23:42:34.576549+00:00 GitLab Importer Fixing VCID-jzj3-ddrr-u7hd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2022-25927.yml 38.1.0
2026-04-02T16:58:50.233381+00:00 GHSA Importer Fixing VCID-jzj3-ddrr-u7hd https://github.com/advisories/GHSA-fhg7-m89q-25r3 38.1.0
2026-04-01T12:57:55.018482+00:00 GithubOSV Importer Fixing VCID-jzj3-ddrr-u7hd https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/01/GHSA-fhg7-m89q-25r3/GHSA-fhg7-m89q-25r3.json 38.0.0
2026-04-01T12:50:48.398591+00:00 GitLab Importer Fixing VCID-jzj3-ddrr-u7hd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ua-parser-js/CVE-2022-25927.yml 38.0.0