Skip to content
OpenAdvisories

Product · HackerOne

useragent node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2017-16030

    ReDoS via long UserAgent header in useragent

    Useragent is used to parse useragent headers. It uses several regular expressions to accomplish this. An attacker could edit their own headers, creating an arbitrarily long useragent string, causing the event loop and server to block. This affects Useragent 2…

    HackerOne useragent node module useragent npm