-
Notifications
You must be signed in to change notification settings - Fork 3
Closed
Description
ua-parser-js 1.0.2 is vulnerable to ReDoS (CVE-2022-25927). Can this be updated to 1.0.33 or later and a new version of signals-sdk.js be released?
ping-javascript-sdk/packages/protect/src/lib/signals-sdk.js
Lines 3182 to 3187 in 0cef673
(m.VERSION = '1.0.2'), | |
(m.BROWSER = l([i, o, 'major'])), | |
(m.CPU = l(['architecture'])), | |
(m.DEVICE = l([n, a, r, 'console', s, c, u, 'wearable', 'embedded'])), | |
(m.ENGINE = m.OS = l([i, o])), | |
(t.UAParser = m); |
Metadata
Metadata
Assignees
Labels
No labels