Known Vulnerabilities for Ua-parser-js by Faisalman
Listed below are 10 of the newest known vulnerabilities associated with "Ua-parser-js" by "Faisalman".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-104861 json | probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parse_sync/svg.js and lib/par... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-104844 json | PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it. Prior to 7.1.6, src/pa... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-104182 json | stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-103600 json | Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) in Legion of the Bouncy Castle Inc. bc-csharp ... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-103241 json | A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/... | Not Provided | 2026-09-30 | 2026-10-02 |
| CVE-2026-102990 json | basic-ftp is an FTP client for Node.js. Prior to 6.2.1, Client.list() can be forced by a malicious or compromised FTP server ... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-102829 json | simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations ... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102730 json | Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **write** ... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102718 json | hey, `_nx_snmp_utility_object_id_get` in the NetX Duo SNMP addon does not validate the claimed OID data length against the... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102716 json | An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session hea... | Not Provided | 2026-09-29 | 2026-09-29 |