Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: snyk

Published: 2023-01-25T05:00:00.897Z

Updated: 2024-08-03T04:49:44.149Z

Reserved: 2022-02-24T11:58:25.175Z

Link: CVE-2022-25927

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-01-26T21:15:32.107

Modified: 2024-11-21T06:53:14.233

Link: CVE-2022-25927

cve-icon Redhat

Severity : Moderate

Publid Date: 2023-01-22T00:00:00Z

Links: CVE-2022-25927 - Bugzilla