Description
A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the crypto mining component which introduces a backdoor. Upgrading to version 0.7.30, 0.8.1 and 1.0.1 is able to address this issue. It is recommended to upgrade the affected component.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | ua-parser-js | 0.7.29, 0.8.0, 1.0.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | ua-parser-js | >= 0.7.29, < 0.7.30 | 0.7.30 | GHSA-pjwm-rvh2-c87w |
| npm | ua-parser-js | >= 0.8.0, < 0.8.1 | 0.8.1 | GHSA-pjwm-rvh2-c87w |
| npm | ua-parser-js | >= 1.0.0, < 1.0.1 | 1.0.1 | GHSA-pjwm-rvh2-c87w |