useragent (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package useragent, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2017-16030 — CVSS 7.5 (high): Useragent is used to parse useragent headers. It uses several regular expressions to accomplish this. An attacker could edit their own…
• CVE-2020-26311 — CVSS 7.5 (high): Useragent is a user agent parser for Node.js. All versions as of time of publication contain one or more regular expressions that are…