CVE-2020-7793

PoC ×3—

CVSS 3.1

7.5 high

EPSS

4%p90

Published

Dec 11, 2020 (Dec 11, 2020)

Modified

Jun 17, 2026

Description

The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).

Vendors: ua-parser-js project siemens
Products: ua-parser-js, sinec ins
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news0 stories

No ingested article mentions this CVE yet.