nl.basjes.parse.useragent vulnerabilities

Products

• nl.basjes.parse.useragent/yauaa 1
• nl.basjes.parse.useragent/yauaa-beam 1
• nl.basjes.parse.useragent/yauaa-beam-sql 1
• nl.basjes.parse.useragent/yauaa-drill 1
• nl.basjes.parse.useragent/yauaa-elasticsearch 1
• nl.basjes.parse.useragent/yauaa-elasticsearch-8 1
• nl.basjes.parse.useragent/yauaa-flink 1
• nl.basjes.parse.useragent/yauaa-flink-table 1
• nl.basjes.parse.useragent/yauaa-hive 1
• nl.basjes.parse.useragent/yauaa-logparser 1
• nl.basjes.parse.useragent/yauaa-snowflake 1
• nl.basjes.parse.useragent/yauaa-trino 1

Latest nl.basjes.parse.useragent CVEs

Newest publication first

1. CVE-2022-23496 A crafted list can trigger a ArrayIndexOutOfBoundsException in Yauaa

   Published 2022-12-08

   High·CVSS 7.5 EPSS 0.80%

   Yet Another UserAgent Analyzer (Yauaa) is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.