Description
ua-parser is a port of Browserscope's user agent parser. ua-parser is vulnerable to a ReDoS (Regular Expression Denial of Service) attack when given a specially crafted UserAgent header.
Remediation
References
https://nodesecurity.io/advisories/316
Related Vulnerabilities
CVE-2018-6464 Vulnerability in maven package org.webjars.bower:simditor
CVE-2021-29441 Vulnerability in maven package com.alibaba.nacos:nacos-common
CVE-2020-2188 Vulnerability in maven package org.jenkins-ci.plugins:ec2
CVE-2016-10651 Vulnerability in npm package webdriver-launcher
CVE-2021-22096 Vulnerability in maven package org.springframework:spring-webflux