CVE-2020-7733

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.

References

Affected packages

Git / github.com/faisalman/ua-parser-js

Affected ranges

Type

GIT

Repo

https://github.com/faisalman/ua-parser-js

Events

Introduced

Fixed

e72371c34de7888b3ed7ca9781f3fee3a1be7b3e

Fixed

233d3bae22a795153a7e6638887ce159c63e557d

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.7.22"
        }
    ]
}

Affected versions

0.*

0.7.1

0.7.10

0.7.11

0.7.12

0.7.13

0.7.14

0.7.15

0.7.16

0.7.17

0.7.18

0.7.19

0.7.2

0.7.20

0.7.21

0.7.3

0.7.7

0.7.9

v0.*

v0.1

v0.1.2

v0.2.0

v0.2.1

v0.3.0

v0.3.2

v0.3.4

v0.4.0

v0.4.15

v0.4.3

v0.4.6

v0.4.8

v0.5.11

v0.5.15

v0.5.25

v0.6.0

v0.6.2

v0.7.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7733.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.7.0"
            }
        ]
    }
]