npm/ua-parser-js CVE-2020-7793: high 7.5, EPSS 3.92%
ua-parser-js Regular Expression Denial of Service vulnerability
Action: Upgrade ua-parser-js to 0.7.23 or later.
npm i ua-parser-js@0.7.23Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.23 | - |
Fixed versions
| 0.7.23 |
Sources
- osv: GHSA-394c-5j6w-4xmx
- https://nvd.nist.gov/vuln/detail/CVE-2020-7793
- https://github.com/faisalman/ua-parser-js/commit/6d1f26df051ba681463ef109d36c9cf0f7e32b18
- https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBFAISALMAN-1050388
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1050387
- https://snyk.io/vuln/SNYK-JS-UAPARSERJS-1023599
CVE-2020-7793 · published · modified · JSON