`ua-parser-js`

Ecosystem:
npm

Package URL:
pkg:npm/ua-parser-js

Total PRs:
1,538 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
1,173 repositories

Unique Repos (30 days):
4 repositories

Security Advisories

Regular Expression Denial of Service in ua-parser-js

GHSA-662x-fhqg-9p8v CVE-2020-7733 HIGH published about 5 years ago • updated about 1 month ago

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tab...

UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`

GHSA-9h5v-pfqq-x599 CVE-2026-48125 MODERATE published about 1 month ago • updated 1 day ago

### Summary A regular expression denial-of-service (ReDoS) vulnerability has been discovered in `ua-parser-js` when using the Client Hints API. By...

View all 6 advisories

Recent PRs

RSS Feed

chore(deps): bump ua-parser-js from 0.7.38 to 2.0.10

SweetSophia/NeoTwine #134

0.7.38 → 2.0.10 Major PR

Open about 1 month ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 26 updates

GameServerHub/game-server-hub #18

2.0.9 → 2.0.10 Patch PR

Closed about 1 month ago 1 comment

build(deps): bump ua-parser-js from 2.0.9 to 2.0.10

RabbyHub/Rabby #3812

2.0.9 → 2.0.10 Patch PR

Closed about 1 month ago 1 comment

Bump ua-parser-js and @rainbow-me/rainbowkit

yeathtit/sol2base #10

2.0.5 → 2.0.10 Patch PR

Open about 1 month ago 1 comment

build(deps): bump the production-dependencies group with 24 updates

RealRogerWinter/price-games-public #3

2.0.9 → 2.0.10 Patch PR

Open about 2 months ago 1 comment

Bump ua-parser-js from 1.0.40 to 2.0.10

ximxal/ximdrop #6

1.0.40 → 2.0.10 Major PR

Open about 2 months ago 1 comment

deps(deps): bump the minor-and-patch group across 1 directory with 51 updates

chenjeraimunyaradzi05-art/Nexta #58

2.0.8 → 2.0.10 Patch PR

Closed about 2 months ago 3 comments

chore(deps): bump the dependencies group across 1 directory with 38 updates

teacoder-team/backend #114

2.0.9 → 2.0.10 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the production-dependencies group with 4 updates

ruudsl/tutti #49

2.0.9 → 2.0.10 Patch PR

Open about 2 months ago 2 comments

build(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates

pedrotroccoli/1o1-utils #186

2.0.9 → 2.0.10 Patch PR

Open 2 months ago 1 comment

chore(deps)(deps): bump the patch-updates group across 1 directory with 11 updates

collenduba/bluecup-sveltekit-hosting-app #13

2.0.9 → 2.0.10 Patch PR

Open 2 months ago 14 comments

deps(deps): bump the npm-production group across 1 directory with 24 updates

sublime247/mobile-money #834

2.0.9 → 2.0.10 Patch PR

Open 2 months ago 2 comments

build(deps): bump the backend-all group across 1 directory with 7 updates

koolname99/zero_trust_authentication_platform #26

1.0.41 → 2.0.9 Major PR

Closed 3 months ago 1 comment

Bump ua-parser-js from 0.7.19 to 0.7.41

IRasmivan/blog #12

0.7.19 → 0.7.41 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the minor-and-patch group across 1 directory with 40 updates

temelreiz/auxite-wallet #13

2.0.7 → 2.0.9 Patch PR

Closed 3 months ago 3 comments

deps(deps): bump the minor-and-patch group across 1 directory with 49 updates

chenjeraimunyaradzi05-art/Nexta #56

2.0.8 → 2.0.9 Patch PR

Open 3 months ago 3 comments

build(deps): bump the npm_and_yarn group across 1 directory with 25 updates

AKJUS/odd-platform #26

1.0.2 → 1.0.41 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 6 updates

MyUnisoft/loki-reverse-proxy #207

2.0.4 → 2.0.9 Patch PR

Open 3 months ago 1 comment

deps(deps): bump the minor-and-patch group across 1 directory with 49 updates

chenjeraimunyaradzi05-art/Nexta #55

2.0.8 → 2.0.9 Patch PR

Open 3 months ago 2 comments

chore(deps): bump the dependencies group across 1 directory with 67 updates

teacoder-team/backend #96

2.0.3 → 2.0.9 Patch PR

Closed 3 months ago 1 comment

deps(deps): bump the minor-and-patch group across 1 directory with 46 updates

chenjeraimunyaradzi05-art/Nexta #49

2.0.8 → 2.0.9 Patch PR

Open 3 months ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 25 updates

AKJUS/odd-platform #24

1.0.2 → 1.0.41 Patch PR

Open 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 25 updates

AKJUS/odd-platform #23

1.0.2 → 1.0.41 Patch PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 7 directories with 16 updates

AKJUS/atom #46

0.7.32 → 0.7.41 Patch PR

Open 4 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 17 updates

AKJUS/atom #45

0.7.32 → 0.7.41 Patch PR

Open 4 months ago 1 comment

build(deps): bump the production-dependencies group across 1 directory with 64 updates

1ih29c2002-max/ruknyio #21

2.0.6 → 2.0.9 Patch PR

Closed 4 months ago 2 comments

Bump the production-dependencies group across 1 directory with 64 updates

ruknyio/ruknyio #21

2.0.6 → 2.0.9 Patch PR

Open 4 months ago 1 comment

deps(deps): bump the minor-and-patch group with 44 updates

chenjeraimunyaradzi05-art/Ngurra #92

2.0.8 → 2.0.9 Patch PR

Open 4 months ago 2 comments

deps(deps): bump the minor-and-patch group with 44 updates

chenjeraimunyaradzi05-art/Nexta #39

2.0.8 → 2.0.9 Patch PR

Closed 4 months ago 3 comments

build(deps): bump the npm_and_yarn group across 1 directory with 25 updates

AKJUS/odd-platform #20

1.0.2 → 1.0.41 Patch PR

Open 4 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 20 updates

cf5146/PttChrome #12

0.7.31 → 0.7.41 Patch PR

Closed 4 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 32 updates

louisbrulenaudet/quill #12

0.7.32 → 0.7.41 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 19 directories with 13 updates

AKJUS/gatsby #101

0.7.31 → 0.7.41 Patch PR

Open 4 months ago 6 comments

build(deps): bump the production-dependencies group across 1 directory with 60 updates

1ih29c2002-max/ruknyio #17

2.0.6 → 2.0.9 Patch PR

Closed 4 months ago 2 comments

chore(deps): Bump the minor-and-patch group across 1 directory with 64 updates

VinniZP/lingx #77

2.0.7 → 2.0.9 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 9 updates

xflash-panda/shower #29

2.0.7 → 2.0.9 Patch PR

Closed 4 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 24 updates

AKJUS/odd-platform #14

1.0.2 → 1.0.41 Patch PR

Open 4 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 14 updates

AKJUS/atom #41

0.7.32 → 0.7.41 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 9 updates

AKJUS/gatsby #90

0.7.31 → 0.7.41 Patch PR

Closed 4 months ago 3 comments

Bump the npm_and_yarn group across 7 directories with 23 updates

ANT0071/atom #13

0.7.32 → 0.7.41 Patch PR

Closed 4 months ago 1 comment

chore: bump ua-parser-js from 1.0.41 to 2.0.9

SableClient/Sable #202

1.0.41 → 2.0.9 Major PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 22 updates

ANT0071/atom #12

0.7.32 → 0.7.41 Patch PR

Closed 5 months ago 1 comment

Bump the minor-and-patch group across 1 directory with 35 updates

temelreiz/auxite-wallet #11

2.0.7 → 2.0.9 Patch PR

Open 5 months ago 2 comments

chore(deps): Bump the minor-and-patch group across 1 directory with 63 updates

VinniZP/lingx #76

2.0.7 → 2.0.9 Patch PR

Closed 5 months ago 2 comments

Bump the all-npm-deps group across 1 directory with 54 updates

ThunderboltDev/PDFPal #12

2.0.6 → 2.0.9 Patch PR

Open 5 months ago 1 comment

build(deps): bump the npm_and_yarn group across 7 directories with 27 updates

sumonst21/amplify-cli #24

0.7.31 → 0.7.41 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the production-dependencies group with 22 updates

TheNolle/url-shortener #28

2.0.8 → 2.0.9 Patch PR

Open 5 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 25 updates

AKJUS/atom #38

0.7.32 → 0.7.41 Patch PR

Open 5 months ago 1 comment

chore(deps): bump ua-parser-js from 1.0.40 to 2.0.9

DontMash/shapez-vortex #142

1.0.40 → 2.0.9 Major PR

Open 5 months ago 1 comment

build(deps): bump the npm_and_yarn group across 5 directories with 29 updates

digi-booster/angular #5

0.7.31 → 0.7.41 Patch PR

Closed 5 months ago 1 comment

Package Details

Name:	`ua-parser-js`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/ua-parser-js`
JSON API:	View JSON

Security Advisories

6

Active advisories

HIGH 5

MODERATE 1

View All npm Advisories

Package Information

Description:

Detect Browser, Engine, OS, CPU, and Device type/model from User-Agent & Client Hints data. Supports browser & node.js environment

Repository:	https://github.com/faisalman/ua-parser-js
Homepage:	https://uaparser.dev
Latest Release:	`2.0.3` over 1 year ago
Dependent Repos:	1,003,902
Dependent Packages:	1,976
Downloads:	68,781,655
Ranking:	Top 0.0341% by dependent repos Top 0.0318% by downloads Top 0.0394% by dependent pkgs

PR Status

Open 546 (35.5%)

Merged 128 (8.3%)

Closed 779 (50.7%)

PR Types

Major 108 (7.0%)

Patch 1,343 (87.3%)

Removal 2 (0.1%)

ua-parser-js

Security Advisories

Regular Expression Denial of Service in ua-parser-js

UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`

ReDoS Vulnerability in ua-parser-js version

Regular Expression Denial of Service (ReDoS) in ua-parser-js

Embedded malware in ua-parser-js

Recent PRs

Package Details

Security Advisories

6

Package Information

PR Status

PR Types

`ua-parser-js`