{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.3.0"}],"component":"useragent","cve_ids":["CVE-2020-26311"],"ecosystem":"npm","epss":0.00518,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mgfv-m47x-4wqp","id":"tcs_01M5KG0NV9QXNJEWMDN3JFKWE2","modified_at":"2025-09-03T15:17:53Z","published_at":"2024-10-26T21:30:47Z","references":["https://osv.dev/vulnerability/GHSA-mgfv-m47x-4wqp","https://nvd.nist.gov/vuln/detail/CVE-2020-26311","https://github.com/3rd-Eden/useragent/issues/167","https://github.com/3rd-Eden/useragent/commit/4c3ee79358bea72d88fe78ac98f4f861db40b89b","https://github.com/3rd-Eden/useragent","https://github.com/3rd-Eden/useragent/blob/ffa906f923183c85fbb9e6c90f19345e2bd3c52a/lib/regexps.js#L5568","https://securitylab.github.com/advisories/GHSL-2020-312-redos-useragent"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-mgfv-m47x-4wqp","url":"https://osv.dev/vulnerability/GHSA-mgfv-m47x-4wqp"}],"summary":"useragent Regular Expression Denial of Service vulnerability"}