Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-25927
5.3
MEDIUMCVSS v3
Severity scale
010
Description
Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.
@types/ua-parser-js
NPMTypeScript definitions for ua-parser-js
NPMTypeScript definitions for ua-parser-js>= 0.8.1, < 1.0.33, >= 0.7.30, < 0.7.33, >= 0.8.0, < 1.0.33NVD
ua-parser-jsNPMDetect Browser, Engine, OS, CPU, and Device type/model from User-Agent & Client Hints data. Supports browser & node.js environment
NPMDetect Browser, Engine, OS, CPU, and Device type/model from User-Agent & Client Hints data. Supports browser & node.js environment>= 0.8.1, < 1.0.33, >= 0.7.30, < 0.7.33, >= 0.8.0, < 1.0.33NVD
GitHub