{"id":"GHSA-78hm-5hjw-58mh","aliases":[],"status":"published","title":"ua-parser/uap-php ReDoS vulnerability","description":"A regex expression in ua-parser/uap-php could lead to a ReDoS vulnerability in versions prior to 3.8.0.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1333"],"published":"2024-06-07T22:14:49Z","modified":"2024-12-04T05:45:02Z","fixes":[{"ecosystem":"Packagist","package":"ua-parser/uap-php","fixed_in":["3.8.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"ua-parser/uap-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0"}]}]},{"source":"osv","ecosystem":"Packagist","package":"ua-parser/uap-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0"}]}],"versions":["v3.4.0","v3.4.1","v3.4.2","v3.4.3","v3.4.4","v3.4.5","v3.4.6","v3.4.7","v3.5.0","v3.6.0","v3.7.0"]}],"references":[{"url":"https://github.com/ua-parser/uap-core/pull/363","tags":["web"]},{"url":"https://github.com/ua-parser/uap-core/commit/156f7e12b215bddbaf3df4514c399d683e6cdadc","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/ua-parser/uap-php/2018-12-14.yaml","tags":["web"]},{"url":"https://github.com/ua-parser/uap-php/commit/947f80b39130c83a3d1c75900ac1b58828ed8aef","tags":["web"]},{"url":"https://github.com/advisories/GHSA-78hm-5hjw-58mh"},{"url":"https://github.com/ua-parser/uap-php","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-78hm-5hjw-58mh","title":"ua-parser/uap-php ReDoS vulnerability","description":"A regex expression in ua-parser/uap-php could lead to a ReDoS vulnerability in versions prior to 3.8.0.","status":"published","published":"2024-06-07T22:14:49Z","modified":"2024-06-07T22:15:44Z","cwes":["CWE-1333"],"updated_at":"2026-11-02T14:37:54.624184Z"}],"osv":[{"id":"GHSA-78hm-5hjw-58mh","title":"ua-parser/uap-php ReDoS vulnerability","description":"A regex expression in ua-parser/uap-php could lead to a ReDoS vulnerability in versions prior to 3.8.0.","status":"published","published":"2024-06-07T22:14:49Z","modified":"2024-12-04T05:45:02.512198Z","cwes":["CWE-1333"],"updated_at":"2026-11-02T15:46:40.657155Z"}]}}