What’s Vulnerable › Products

ua-parser-js vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your ua-parser-js version is affected

Latest ua-parser-js vulnerabilities

• CVE-2026-48125 — UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()` (CVSS 5.3)
• CVE-2022-25927 — (CVSS 7.5)
• CVE-2021-4229 — ua-parser-js Crypto Mining backdoor (CVSS 8.8)
• CVE-2021-27292 — Regular Expression Denial of Service (ReDoS) in ua-parser-js (CVSS 7.5)
• CVE-2020-7793 — Regular Expression Denial of Service (ReDoS) (CVSS 7.5)
• CVE-2020-7733 — Regular Expression Denial of Service (ReDoS) (CVSS 7.5)