CVE-2020-7733 PUBLISHED

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.

EPSS 1.20% · 78.8th percentile

Risk Scores

EPSS Score
1.20%
78.8th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTSnode-ua-parser-js0, 0.7.31+ds+~0.7.36-1, 0.7.24+ds-2
Ubuntu:20.04:LTSnode-ua-parser-js0, 0.7.14-1
Ubuntu:24.04:LTSnode-ua-parser-js0.8.1+ds+~0.7.36-3, 0
Ubuntu:18.04:LTSnode-ua-parser-js0, 0.7.14-1
Ubuntu:25.10node-ua-parser-js0.8.1+ds+~0.7.36-3, 0

Timeline

References

Open in Interactive Console →