npm/uap-core CVE-2018-20164: medium 5.3, EPSS 3.30%
uap-core Regular Expression Denial of Service issue
Action: Upgrade uap-core to 0.6.0 or later.
npm i uap-core@0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: GHSA-fx7m-j728-mjw3
- https://nvd.nist.gov/vuln/detail/CVE-2018-20164
- https://github.com/ua-parser/uap-core/issues/332
- https://github.com/ua-parser/uap-core/commit/010ccdc7303546cd22b9da687c29f4a996990014
- https://github.com/ua-parser/uap-core/commit/156f7e12b215bddbaf3df4514c399d683e6cdadc
- https://github.com/ua-parser/uap-core
- https://www.x41-dsec.de/lab/advisories/x41-2018-009-uaparser
CVE-2018-20164 · published · modified · JSON