Maven/nl.basjes.parse.useragent:yauaa-drill CVE-2022-23496: high 8.6
Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List
Action: Upgrade nl.basjes.parse.useragent:yauaa-drill to 7.9.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.9.0 | - |
Fixed versions
| 7.9.0 |
Sources
- osv: GHSA-c4pm-63cg-9j7h#Maven/nl.basjes.parse.useragent:yauaa-drill
- https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h
- https://nvd.nist.gov/vuln/detail/CVE-2022-23496
- https://github.com/nielsbasjes/yauaa/commit/3017a866e2cff0d308f264b66fde4fa79e3beb9e
- https://github.com/nielsbasjes/yauaa
CVE-2022-23496 · published · modified · JSON