GHSA-662x-fhqg-9p8vHighCVSS 7.5

Regular Expression Denial of Service in ua-parser-js

Published
May 7, 2021
Last Modified
January 31, 2023

🔗 CVE IDs covered (1)

CVE-2020-7733 →

📋 Description

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.

🎯 Affected products1

  • npm/ua-parser-js:< 0.7.22

🔗 References (7)