EUVD-2019-0379

Malware in sbrugna...

app.js (>=0.0.1 <=0.0.21), attester (>=1.0.2 <=1.2.1) +37 more potentially affected by CVE-2017-16086 via ua-parser (>=0.2.4 <=0.3.5)

ua-parser NPM version =0.2.4, =0.0.1, =1.0.2, =2.2.2, =1.0.0, =0.1.0, =0.0.1, =0.0.5, =0.0.2, =0.2.2, =0.2.16 and more Source cves: CVE-2017-16086 Source advisory: OSV:GHSA-PMG9-P9R2-6Q87...

Regular Expression Denial Of Service (ReDoS)

ua-parser is vulnerable to regular expression denial of service ReDoS. A malicious user can pass a string through the User-Agent header to cause a ReDoS...