CVE-2022-25927

5.3MEDIUM

Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.

发布于: 1/26/2023更新于: 4/1/2025
在NVD查看在MITRE查看

描述

Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.

AI分析AI驱动

受影响产品

ua-parser-js_projectua-parser-js
ua-parser-js_projectua-parser-js

参考资料