ua-parser-js
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-25927 | 0.7.30 – < 0.7.33 ; 0.8.1 – < 1.0.33 | Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial | HIGH 7.5 | 1.7 % | ||
| CVE-2021-4229 | 0.7.29 ; 0.8.0 ; 1.0.0 | ua-parser-js Crypto Mining backdoor | HIGH 8.8 | 1.5 % | ||
| CVE-2020-7793 | unspecified – < 0.7.23 | Regular Expression Denial of Service (ReDoS) | HIGH 7.5 | 3.9 % | ||
| CVE-2020-7733 | unspecified – < 0.7.22 | Regular Expression Denial of Service (ReDoS) | HIGH 7.5 | 4.5 % |