Description
This affects the package es6-crawler-detect before 3.1.3. No limitation of user agent string length supplied to regex operators.
Remediation
References
https://github.com/JefferyHus/es6-crawler-detect/pull/27
https://snyk.io/vuln/SNYK-JS-ES6CRAWLERDETECT-1051529
Related Vulnerabilities
CVE-2020-15125 Vulnerability in npm package auth0
CVE-2022-45401 Vulnerability in maven package org.jenkinsci.plugins:associated-files
CVE-2022-40955 Vulnerability in maven package org.apache.inlong:sort-connector-mysql-cdc
CVE-2021-3632 Vulnerability in maven package org.keycloak:keycloak-core
CVE-2022-25908 Vulnerability in npm package create-choo-electron