VYPR

ua-parser-js

by Faisalman

CVEs (1)

  • CVE-2026-48125Jun 15, 2026
    risk 0.00cvss epss

    ### Summary A regular expression denial-of-service (ReDoS) vulnerability has been discovered in `ua-parser-js` when using the Client Hints API. By sending a crafted `Sec-CH-UA-Model` header to an application that calls `UAParser(headers).withClientHints()`, an attacker can…