CVE-2020-5243

CVE-2020-5243 describes a denial-of-service vulnerability in uap-core before 0.7.3, where processing crafted User-Agent strings triggers overlapping capture group REGEX backtracking (REDoS). The issue affects the library’s User-Agent parsing, allowing remote attackers to overload a server by send...

CVE-2021-21317

The CVE-2021-21317 issue affects the uap-core npm package (the core of BrowserScope’s user agent parser). In versions prior to 0.11.0, certain regexes allow regular expression denial of service (REDoS) via overlapping capture groups, enabling an attacker to overload a server by sending crafted lo...