CVE-2022-25927

 

Published at: - 26-01-2023 10:15

Last modified: - 27-01-2023 03:03

Total changes: - 2

Description

Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.

Common Vulnerability Scoring System (CVSS)

-

 

Verification logic

 

Reference

• https://security.snyk.io/vuln/SNYK-JS-UAPARSERJS-3244450
• https://github.com/faisalman/ua-parser-js/commit/a6140a17dd0300a35cfc9cff999545f267889411

 

Keywords

NVD

 

CVE-2022-25927

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures