This repository has been archived by the owner on May 6, 2021. It is now read-only.
CVE-2020-7733 (High) detected in ua-parser-js-0.7.21.tgz #271
Labels
security vulnerability
Security vulnerability detected by WhiteSource
CVE-2020-7733 - High Severity Vulnerability
Vulnerable Library - ua-parser-js-0.7.21.tgz
Lightweight JavaScript-based user-agent string parser
Library home page: https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.21.tgz
Path to dependency file: angular2-book-list/package.json
Path to vulnerable library: angular2-book-list/node_modules/ua-parser-js/package.json
Dependency Hierarchy:
Found in HEAD commit: c76ff3c3647e38a2276126ea9e1387a1e8b72f7f
Found in base branch: master
Vulnerability Details
The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.
Publish Date: 2020-09-16
URL: CVE-2020-7733
CVSS 3 Score Details (7.5)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7733
Release Date: 2020-07-21
Fix Resolution: 0.7.22
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: