ua-parser-js vulnerabilities (npm)

6 vulnerabilities.

• ua-parser-js npm UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()` CVE-2026-48125 Fix available 5.3 MediumJune 15, 2026
• ua-parser-js npm ReDoS Vulnerability in ua-parser-js version CVE-2022-25927 Public exploitFix available 5.3 MediumJanuary 24, 2023
• ua-parser-js npm ua-parser-js Crypto Mining backdoor CVE-2021-4229 Fix available 5.0 MediumOctober 22, 2021
• ua-parser-js npm Regular Expression Denial of Service (ReDoS) in ua-parser-js CVE-2021-27292 Fix available 7.5 HighMarch 17, 2021
• ua-parser-js npm Regular Expression Denial of Service (ReDoS) CVE-2020-7793 Fix available 7.5 HighDecember 11, 2020
• ua-parser-js npm Regular Expression Denial of Service (ReDoS) CVE-2020-7733 Fix available 7.5 HighSeptember 16, 2020