p PatchFirst

CVE-2021-4229

CVE-2021-4229 · ua-parser-js Crypto Mining backdoor

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the crypto mining component which introduces a backdoor. Upgrading to version 0.7.30, 0.8.1 and 1.0.1 is able to address this issue. It is recommended to upgrade the affected component.

CVSS 5.0 · Medium · EPSS 1.5% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • ua-parser-js

    Versions
    • 0.7.29: Affected
    • 0.8.0: Affected
    • 1.0.0: Affected

    No fix published

  • ua-parser-js npm

    Versions
    • 0.7.29
    Affected ranges
    • SEMVER: ≥ 0.7.29, < 0.7.30

    Update to 0.7.30

  • ua-parser-js npm

    Versions
    • 0.8.0
    Affected ranges
    • SEMVER: ≥ 0.8.0, < 0.8.1

    Update to 0.8.1

  • ua-parser-js npm

    Versions
    • 1.0.0
    Affected ranges
    • SEMVER: ≥ 1.0.0, < 1.0.1

    Update to 1.0.1

Original sources

Check your server →