Description
This affects the package es6-crawler-detect before 3.1.3. No limitation of user agent string length supplied to regex operators.
Remediation
References
https://github.com/JefferyHus/es6-crawler-detect/pull/27
https://snyk.io/vuln/SNYK-JS-ES6CRAWLERDETECT-1051529
Related Vulnerabilities
CVE-2014-3604 Vulnerability in maven package ca.juliusdavies:not-yet-commons-ssl
CVE-2017-13098 Vulnerability in maven package com.madgag.spongycastle:bctls-jdk15on
CVE-2020-36732 Vulnerability in maven package org.webjars.bowergithub.brix:crypto-js
CVE-2021-23412 Vulnerability in npm package gitlogplus
CVE-2023-27095 Vulnerability in maven package cn.hippo4j:hippo4j-core