Vulnerabilities > UA Parser JS Project > UA Parser JS > 1.0.0

DATE CVE VULNERABILITY TITLE RISK
2023-01-26 CVE-2022-25927 Unspecified vulnerability in Ua-Parser-Js Project Ua-Parser-Js
Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.
network
low complexity
ua-parser-js-project
7.5
7.5
2022-05-24 CVE-2021-4229 Inclusion of Functionality from Untrusted Control Sphere vulnerability in Ua-Parser-Js Project Ua-Parser-Js 0.7.29/0.8.0/1.0.0
A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0.
network
low complexity
ua-parser-js-project CWE-829
8.8
8.8