CVE-2020-7793

The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).

References

Affected packages

Git / github.com/faisalman/ua-parser-js

Affected ranges

Type

GIT

Repo

https://github.com/faisalman/ua-parser-js

Events

Introduced

Fixed

c7475db860ff57dcb6697dce7e473132e6c0e559

Introduced

Last affected

29d5e43342170414c4b7e88e76d87e4adb43c389

Fixed

6d1f26df051ba681463ef109d36c9cf0f7e32b18

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.7.23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0-sp1"
        }
    ]
}

Affected versions

0.*

0.7.1

0.7.10

0.7.11

0.7.12

0.7.13

0.7.14

0.7.18

0.7.19

0.7.2

0.7.20

0.7.21

0.7.24

0.7.25

0.7.26

0.7.3

0.7.30

0.7.7

0.7.9

0.8.1

1.*

1.0.1

v0.*

v0.1

v0.1.2

v0.2.0

v0.3.0

v0.3.2

v0.3.4

v0.4.0

v0.4.15

v0.4.3

v0.4.6

v0.4.8

v0.5.11

v0.5.15

v0.5.25

v0.6.0

v0.6.2

v0.7.1

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.0-NA"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7793.json"