CVE-2020-7793: Siemens Sinec Ins

High severity, CVSS 7.5. EPSS: 3.9% chance of exploitation in the next 30 days.

The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).

Affected products

• Siemens Sinec Ins: before 1.0 (fixed in 1.0); version 1.0 only
• Ua-Parser-Js Project Ua-Parser-Js: before 0.7.23 (fixed in 0.7.23)

Published 2020-12-11. Last modified 2026-06-17.