CVE-2020-26311
1 advisory.
npm/useragent CVE-2020-26311: high 7.5, EPSS 0.52%
useragent Regular Expression Denial of Service vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.3.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-mgfv-m47x-4wqp
- https://nvd.nist.gov/vuln/detail/CVE-2020-26311
- https://github.com/3rd-Eden/useragent/issues/167
- https://github.com/3rd-Eden/useragent/commit/4c3ee79358bea72d88fe78ac98f4f861db40b89b
- https://github.com/3rd-Eden/useragent
- https://github.com/3rd-Eden/useragent/blob/ffa906f923183c85fbb9e6c90f19345e2bd3c52a/lib/regexps.js#L5568
- https://securitylab.github.com/advisories/GHSL-2020-312-redos-useragent
CVE-2020-26311 · published · modified · JSON