[Snyk: High] Regular Expression Denial of Service (ReDoS) (due 10/23/20)

[pkfec]

Vulnerable module: ua-parser-js

Overview:
ua-parser-js is a lightweight JavaScript-based user-agent string parser.
Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.

snyk link: https://app.snyk.io/vuln/SNYK-JS-UAPARSERJS-610226

Introduced through: draft-js@0.10.5

Remediation : Upgrade ua-parser-js to version 0.7.22 or higher.

Completion criteria:

• Verify that this is an issue and address the vulnerability as appropriate