rubygems user_agent_parser vulnerabilities

Latest rubygems user_agent_parser CVEs

Newest publication first

1. GHSA-pcqq-5962-hvcw Denial of Service in uap-core when processing crafted User-Agent strings

   Published 2020-03-10

   Unknown

   Impact Some regexes are vulnerable to regular expression denial of service (REDoS) due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTP(S) request to maliciously crafted long strings. Patches Please updat...

2. CVE-2020-5243 Denial of Service in uap-core when processing crafted User-Agent strings

   Published 2020-02-20

   High·CVSS 7.5 EPSS 2.3% PoC

   uap-core before 0.7.3 is vulnerable to a denial of service attack when processing crafted User-Agent strings. Some regexes are vulnerable to regular expression denial of service (REDoS) due to overlapping capture groups. This allows remote attackers to overload a server by settin...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.