ua-parser-js vulnerabilities

Detect Browser, Engine, OS, CPU, and Device type/model from User-Agent & Client Hints data. Supports browser & node.js environment

2.0.6

13 years ago

26 days ago

Known vulnerabilities in the ua-parser-js package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Regular Expression Denial of Service (ReDoS)	>=0.7.30 <0.7.33>=0.8.1 <1.0.33
C Embedded Malicious Code	>=1.0.0 <1.0.1>=0.8.0 <0.8.1>=0.7.29 <0.7.30
M Regular Expression Denial of Service (ReDoS)	<0.7.24
H Regular Expression Denial of Service (ReDoS)	<0.7.23
H Regular Expression Denial of Service (ReDoS)	<0.7.22
M Regular Expression Denial of Service (ReDoS)	<0.7.18
M Regular Expression Denial of Service (ReDoS)	<0.7.16

90 VERSIONS IN TOTAL See all versions