Skip to content
OpenAdvisories

Package · npm

useragent

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2020-26311

    GHSL-2020-312: Regular Expression Denial of Service (ReDoS) in useragent

    Useragent is a user agent parser for Node.js. All versions as of time of publication contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no patches are available.

    3rd-Eden useragent useragent npm
  • High —
    CVE-2017-16030

    ReDoS via long UserAgent header in useragent

    Useragent is used to parse useragent headers. It uses several regular expressions to accomplish this. An attacker could edit their own headers, creating an arbitrarily long useragent string, causing the event loop and server to block. This affects Useragent 2…

    HackerOne useragent node module useragent npm