npm/uap-core CVE-2020-5243: medium 5.7, EPSS 2.29%
Denial of Service in uap-core when processing crafted User-Agent strings
Action: Upgrade uap-core to 0.7.3 or later.
npm i uap-core@0.7.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.3 | - |
Fixed versions
| 0.7.3 |
Sources
- osv: GHSA-cmcx-xhr8-3w9p
- https://github.com/ua-parser/uap-core/security/advisories/GHSA-cmcx-xhr8-3w9p
- https://github.com/ua-parser/uap-ruby/security/advisories/GHSA-pcqq-5962-hvcw
- https://nvd.nist.gov/vuln/detail/CVE-2020-5243
- https://github.com/ua-parser/uap-core/commit/0afd61ed85396a3b5316f18bfd1edfaadf8e88e1
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/user_agent_parser/CVE-2020-5243.yml
CVE-2020-5243 · published · modified · JSON