Read the docs

Ua-parser-js Project

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Ua-parser-js Project records in CISA KEV

No Ua-parser-js Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ua-parser-js 6 records HIGH

Records

6 records

TI-2022-09474 CVE-2022-25927 · GHSA-fhg7-m89q-25r3

Regular expression denial of service in ua-parser-js

Priority HIGH 72

Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01774 Published 2023-01-25 Partial fix · 0.7.33, 1.0.33 CWE-1333
TI-2021-03090 CVE-2021-4229 · GHSA-pjwm-rvh2-c87w

ua-parser-js Crypto Mining backdoor

Priority MEDIUM 41

A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01518 Published 2022-05-24 Fixed in 0.7.30, 0.8.1 +1 CWE-912
TI-2020-06309 CVE-2020-7793 · GHSA-394c-5j6w-4xmx

Regular expression denial of service (ReDoS) in ua-parser-js

Priority MEDIUM 40

The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03925 Published 2020-12-11 Partial fix · 0.7.23 CWE-400
TI-2020-06251 CVE-2020-7733 · GHSA-662x-fhqg-9p8v

Regular expression denial of service (ReDoS) in ua-parser-js

Priority MEDIUM 40

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04483 Published 2020-09-16 Partial fix · 0.7.22 CWE-400
Open these records in search →