Skip to content
OpenAdvisories

Product · HackerOne

ua-parser node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2017-16086 Public exploit

    ReDoS via long UserAgent header in ua-parser

    ua-parser is a port of Browserscope's user agent parser. ua-parser is vulnerable to a ReDoS (Regular Expression Denial of Service) attack when given a specially crafted UserAgent header.

    HackerOne ua-parser node module ua-parser npm