Filtered by vendor Useragent Project Subscriptions
Filtered by product Useragent Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-16030 1 Useragent Project 1 Useragent 2024-11-21 N/A
Useragent is used to parse useragent headers. It uses several regular expressions to accomplish this. An attacker could edit their own headers, creating an arbitrarily long useragent string, causing the event loop and server to block. This affects Useragent 2.1.12 and earlier.
CVE-2020-26311 1 Useragent Project 1 Useragent 2024-10-30 7.5 High
Useragent is a user agent parser for Node.js. All versions as of time of publication contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no patches are available.