https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T22:06:26.169676+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-178196 EUVD-2026-178196 2026-10-18T22:06:26.172514+00:00 EUVD-2026-178196 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16086 fkie_cve-2017-16086 2026-10-18T22:06:26.172544+00:00

ua-parser is a port of Browserscope's user agent parser. ua-parser is vulnerable to a ReDoS (Regular Expression Denial of Service) attack when given a specially crafted UserAgent header.

 https://cve.radiocsirt.org/vuln/ghsa-pmg9-p9r2-6q87 GHSA-pmg9-p9r2-6q87 — ReDoS via long UserAgent header in ua-parser 2026-10-18T22:06:26.172574+00:00

Affected: npm: ua-parser

Affected versions of `ua-parser` are vulnerable to regular expression denial of service when given a specially crafted `User-Agent` header.

## Recommendation

No patch is currently available for this vulnerability.

The best mitigation is currently to avoid using this package, using a different, functionally equivalent package such as [useragent](https://www.npmjs.com/package/useragent).

 https://cve.radiocsirt.org/vuln/gsd-2017-16086 gsd-2017-16086 2026-10-18T22:06:26.172601+00:00 gsd-2017-16086