Login Request a demo
UA
Product
Ua-parser-js
by Ua-parser-js Project · last CVE Jul 14, 2026
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 5Medium 1Low 0
Severity
All severities6Critical0High5Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ua-parser-js to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-4229
8.8
2%
May 24
A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0
Affected: 0.7.29; 0.8.0; 1.0.0
CVE-2022-25927
7.5
2%
Jan 26
Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim()…
Affected: 0.7.30 before 0.7.33; 0.8.1 before 1.0.33
CVE-2021-27292
7.5
3%
Mar 17
ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service
Affected: 0.7.14 before 0.7.24
CVE-2020-7793
7.5
4%
Dec 11
The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info)
Affected: before 0.7.23
CVE-2020-7733
7.5
4%
Sep 16
The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA
Affected: before 0.7.22
CVE-2026-48125
5.3
1%
Jul 14
UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`
Affected: 2.0.1 before 2.0.10
Showing 6