Skip to content
OpenAdvisories

Vendor

faisalman

1 known vulnerabilities.

Products

ua-parser-js 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-48125

    UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`

    UAParser.js is a JavaScript library to detect browsers, operating systems, CPUs, and devices from user-agent data. From 2.0.1 until 2.0.10, a regular expression denial-of-service vulnerability exists when using the Client Hints API. By sending a crafted Sec-C…

    faisalman ua-parser-js ua-parser-js node-ua-parser-js Debian Ubuntu npm