Homepage
About Snyk

es6-crawler-detect@2.1.0 vulnerabilities

This is an ES6 adaptation of the original PHP library CrawlerDetect, this library will help you detect bots/crawlers/spiders vie the useragent.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the es6-crawler-detect package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Regular Expression Denial of Service (ReDoS)

es6-crawler-detect is an ES6 version of the original PHP class @CrawlerDetect, it helps you detect bots/crawlers and spiders only by scanning the user-agent string or from the global request.headers.

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS). No limitation of user agent string length supplied to regex operators.

How to fix Regular Expression Denial of Service (ReDoS)?

Upgrade es6-crawler-detect to version 3.1.3 or higher.

<3.1.3
Go back to all versions of this package