https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 22:06:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-178196 EUVD-2026-178196 https://cve.radiocsirt.org/vuln/euvd-2026-178196 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16086 <p>ua-parser is a port of Browserscope&#39;s user agent parser. ua-parser is vulnerable to a ReDoS (Regular Expression Denial of Service) attack when given a specially crafted UserAgent header.</p> <p>ua-parser is a port of Browserscope&#39;s user agent parser. ua-parser is vulnerable to a ReDoS (Regular Expression Denial of Service) attack when given a specially crafted UserAgent header.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16086 https://cve.radiocsirt.org/vuln/ghsa-pmg9-p9r2-6q87 <p><strong>Affected:</strong> npm: ua-parser</p> <p>Affected versions of `ua-parser` are vulnerable to regular expression denial of service when given a specially crafted `User-Agent` header.</p> <p>## Recommendation</p> <p>No patch is currently available for this vulnerability.</p> <p>The best mitigation is currently to avoid using this package, using a different, functionally equivalent package such as [useragent](https://www.npmjs.com/package/useragent).</p> <p><strong>Affected:</strong> npm: ua-parser</p> <p>Affected versions of `ua-parser` are vulnerable to regular expression denial of service when given a specially crafted `User-Agent` header.</p> <p>## Recommendation</p> <p>No patch is currently available for this vulnerability.</p> <p>The best mitigation is currently to avoid using this package, using a different, functionally equivalent package such as [useragent](https://www.npmjs.com/package/useragent).</p> https://cve.radiocsirt.org/vuln/ghsa-pmg9-p9r2-6q87 https://cve.radiocsirt.org/vuln/gsd-2017-16086 gsd-2017-16086 https://cve.radiocsirt.org/vuln/gsd-2017-16086