CVE-2020-26311

The CVE-2020-26311 entry concerns the Node.js Useragent parser. The connected sources confirm a Regular Expression Denial of Service (ReDoS) vulnerability caused by one or more part-regular expressions within the useragent package, affecting all versions at the time of publication. The impact is ...

CVE-2017-16030

CVE-2017-16030 affects the Node.js module responsible for parsing User-Agent strings (library in the useragent package). The vulnerability stems from the use of multiple regular expressions to parse headers, allowing an attacker to craft an arbitrarily long User-Agent header that can block the ev...