Skip to content
Sign in
5.3 Medium

CVE-2022-25927 Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to…

Description

Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.

Affected products and versions

Product Affected versions Fixed in
ua-parser-js 0.8 0.8.1 → < 1.0.33 1.0.33
ua-parser-js 0.7 0.7.30 → < 0.7.33 0.7.33

Other CVEs of ua-parser-js

The 3 CVEs of ua-parser-js →
CVE-2020-7793 The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple… 7.5 High CVE-2020-7733 The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex… 7.5 High
Track this CVE