ua-parser-js vulnerabilities

CVEs whose affected-version data names the ua-parser-js package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-48125Medium· 5.3

UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`

UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`

▾ Sunlitua-parser-js · ua-parser-jsEPSS 0.45%via GHSA

ua-parser-js vulnerabilities (CVEs) · VulnSea