Product

nl.basjes.parse.useragent/yauaa-logparser vulnerabilities

1 published CVE affecting nl.basjes.parse.useragent/yauaa-logparser, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest nl.basjes.parse.useragent/yauaa-logparser CVEs

Newest publication first

CVE-2022-23496 A crafted list can trigger a ArrayIndexOutOfBoundsException in Yauaa
Published 2022-12-08

HighCVSS 7.5 EPSS 0.82%

Yet Another UserAgent Analyzer (Yauaa) is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

nl.basjes.parse.useragent/yauaa-logparser vulnerabilities

Latest nl.basjes.parse.useragent/yauaa-logparser CVEs

CVE-2022-23496 A crafted list can trigger a ArrayIndexOutOfBoundsException in Yauaa