Update dependency ua-parser-js to v0.7.33 #96

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

dev-mend-for-github.zerozr99.workers.dev wants to merge 1 commit into master from whitesource-remediate/ua-parser-js-0.x-lockfile

dev-mend-for-github.zerozr99.workers.dev bot commented Jul 30, 2025

This PR contains the following updates:

Package	Type	Update	Change
ua-parser-js (source)	dependencies	patch	`0.7.18` -> `0.7.33`

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	Vulnerability	Reachability
High	7.5	CVE-2020-7733
High	7.5	CVE-2020-7793
High	7.5	CVE-2021-27292
Medium	5.3	CVE-2022-25927

Release Notes

faisalman/ua-parser-js (ua-parser-js)

`v0.7.33`

Add new browser : Cobalt
Identify Macintosh as an Apple device
Fix ReDoS vulnerability

`v0.7.32`

Add new browser : DuckDuckGo, Huawei Browser, LinkedIn
Add new OS : HarmonyOS
Add some Huawei models
Add Sharp Aquos TV
Improve detection Xiaomi Mi CC9
Fix Sony Xperia 1 III misidentified as Acer tablet
Fix Detect Sony BRAVIA as SmartTV
Fix Detect Xiaomi Mi TV as SmartTV
Fix Detect Galaxy Tab S8 as tablet
Fix WeGame mistakenly identified as WeChat
Fix included commas in Safari / Mobile Safari version
Increase UA_MAX_LENGTH to 350

`v0.7.31`

Fix OPPO Reno A5 incorrect detection
Fix TypeError Bug
Use AST to extract regexes and verify them with safe-regex

`v0.7.30`

Add new browser : Obigo, UP.Browser, Klar
Add new device : Oculus, Roku
Add new OS: Maemo, HP-UX, Android-x86, Deepin, elementary OS, GhostBSD, Linspire, Manjaro, Sabayon
Improve detection for Sony Xperia 1ii, LG Android TV, and some more devices
Improve detection for ARM64 CPU
Improve detection for Windows Mobile, Netscape, Mac on PowerPC
Categorize PDA as mobile
Fix Sharp devices misjudged as Huawei
Fix trailing comma for ES3 compatibility
Some code refactor

`v0.7.28`

`v0.7.27`

`v0.7.26`

`v0.7.25`

`v0.7.24`

`v0.7.23`

`v0.7.22`

`v0.7.21`

`v0.7.20`

`v0.7.19`

If you want to rebase/retry this PR, check this box


          Update dependency ua-parser-js to v0.7.33

dev-mend-for-github.zerozr99.workers.dev bot added the security fix label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels