CVE-2022-25927
1 advisory.
npm/ua-parser-js CVE-2022-25927: high 7.5, EPSS 1.73%
ReDoS Vulnerability in ua-parser-js version
Action: Upgrade ua-parser-js to 0.7.33 or later.
npm i ua-parser-js@0.7.33npm i ua-parser-js@1.0.33Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.7.30 | 0.7.33 | - |
| 0.8.0 | 1.0.33 | - |
Fixed versions
| 0.7.33 | 1.0.33 |
Sources
- osv: GHSA-fhg7-m89q-25r3
- https://github.com/faisalman/ua-parser-js/security/advisories/GHSA-fhg7-m89q-25r3
- https://nvd.nist.gov/vuln/detail/CVE-2022-25927
- https://github.com/faisalman/ua-parser-js/commit/a6140a17dd0300a35cfc9cff999545f267889411
- https://github.com/faisalman/ua-parser-js
- https://security.snyk.io/vuln/SNYK-JS-UAPARSERJS-3244450
CVE-2022-25927 · published · modified · JSON