Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2017-16030

nodejs-useragent: Regular expression Denial-of-Service via long UserAgent header

Useragent is used to parse useragent headers. It uses several regular expressions to accomplish this. An attacker could edit their own headers, creating an arbitrarily long useragent string, causing the event loop and server to block. This affects Useragent 2.1.12 and earlier.

CVSS 3.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Useragent Project
Products
Useragent
CVE-2020-26311

GHSL-2020-312: Regular Expression Denial of Service (ReDoS) in useragent

Useragent is a user agent parser for Node.js. All versions as of time of publication contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no patches are available.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Useragent Project
Products
Useragent