← Database

CVE-2022-25927

MEDIUM CVSS: 5.3 Published: 2023-01-26 Modified: 2026-06-17

Description

Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.

Affected Platforms

Ua-Parser-Js Project Ua-Parser-Js

Weakness Type

CWE-1333, CWE-1333, CWE-1333

References