Regular Expression Denial of Service (ReDoS) in ua-parser-js

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-27292 · ADVISORY
• faisalman/ua-parser-js commit 809439e · WEB
• pygments/pygments commit 2e7e8c4 · WEB
• gist.github.com/b-c-ds/6941d80d6b4e694df4bc269493b7be76 · WEB

ua-parser-js のその他の脆弱性

• CVE-2026-48125中 5.3UAParser.js is a JavaScript library to detect browsers, operating systems, CPUs, and devices from user-agent data. From 2.0.1 until 2.0.10, …
• CVE-2022-25927高 7.5Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial…
• CVE-2021-4229高 8.8A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the crypto mining component …
• CVE-2020-7793高 7.5The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit…
• CVE-2020-7733高 7.5The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi …