| Package | Affected versions | Patched versions |
|---|---|---|
| ua-parser-js | ≥ 0.7.14, < 0.7.24 | 0.7.24 |
| ua-parser-js | ≥ 0.7.14, < 0.7.24 | 0.7.24 |
ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free