CVE-2022-25927
Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.
Published Updated
PatchFirst · Latest vulnerabilities
node-ua-parser-js vulnerabilities
Vulnerabilities published for node-ua-parser-js in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
Regular Expression Denial of Service (ReDoS)
The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.