{"id":"GHSA-78hm-5hjw-58mh","aliases":[],"title":"ua-parser/uap-php ReDoS vulnerability","description":"A regex expression in ua-parser/uap-php could lead to a ReDoS vulnerability in versions prior to 3.8.0.","severity":"medium","score":null,"published":"2024-06-07T22:14:49.000Z","modified":"2024-12-04T05:45:02.512Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"ua-parser/uap-php","ranges":[{"events":[{"introduced":"0"},{"fixed":"3.8.0"}],"type":"ECOSYSTEM"}],"versions":["v3.4.0","v3.4.1","v3.4.2","v3.4.3","v3.4.4","v3.4.5","v3.4.6","v3.4.7","v3.5.0","v3.6.0","v3.7.0"],"fixed":["3.8.0"]}],"references":["https://github.com/ua-parser/uap-core/pull/363","https://github.com/ua-parser/uap-core/commit/156f7e12b215bddbaf3df4514c399d683e6cdadc","https://github.com/ua-parser/uap-php/commit/947f80b39130c83a3d1c75900ac1b58828ed8aef","https://github.com/FriendsOfPHP/security-advisories/blob/master/ua-parser/uap-php/2018-12-14.yaml","https://github.com/ua-parser/uap-php"],"sources":[{"name":"OSV","id":"GHSA-78hm-5hjw-58mh","modified":"2024-12-04T05:45:02.512198Z","url":"https://osv.dev/vulnerability/GHSA-78hm-5hjw-58mh"}],"assessments":[]}