{"action":"Upgrade ua-parser-js to 0.7.30 or later.","affected":[{"fixed":"0.7.30","introduced":"0.7.29"},{"fixed":"0.8.1","introduced":"0.8.0"},{"fixed":"1.0.1","introduced":"1.0.0"}],"component":"ua-parser-js","cve_ids":["CVE-2021-4229"],"ecosystem":"npm","epss":0.01518,"exploited":false,"fixed_versions":["0.7.30","0.8.1","1.0.1"],"ghsa_id":"GHSA-pjwm-rvh2-c87w","id":"tcs_01M5KG3WP7MKER5NJTNNC33VEY","modified_at":"2026-07-15T22:30:43.045853758Z","published_at":"2021-10-22T20:38:14Z","references":["https://osv.dev/vulnerability/GHSA-pjwm-rvh2-c87w","https://github.com/faisalman/ua-parser-js/issues/536","https://github.com/faisalman/ua-parser-js/issues/536#issuecomment-949772496","https://github.com/faisalman/ua-parser-js","https://www.npmjs.com/package/ua-parser-js"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-pjwm-rvh2-c87w","url":"https://osv.dev/vulnerability/GHSA-pjwm-rvh2-c87w"}],"summary":"Embedded malware in ua-parser-js"}