CVE-2022-25927: Ua-Parser-Js Project Ua-Parser-Js

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.

Affected products

• Ua-Parser-Js Project Ua-Parser-Js: from 0.7.30, before 0.7.33 (fixed in 0.7.33); from 0.8.1, before 1.0.33 (fixed in 1.0.33)

Published 2023-01-26. Last modified 2026-06-17.