Approved changes feed: RSS · Atom

cpe:2.3:a:yet_another_useragent_analyzer_project:yet_another_useragent_analyzer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYet Another Useragent Analyzer Project (bfbcb582-56c3-5a91-a275-19fcb53c99b1)
ProductYet Another Useragent Analyzer (bb6629d8-fe8b-5e8e-9fec-ee7beac6c0ae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/nielsbasjes/yauaa purl2cpe 2026-06-01 10:12:19.750726
pkg:maven/nl.basjes.parse.useragent/yauaa purl2cpe 2026-06-01 10:12:19.750729

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23496 vulnerable 2026-06-08 05:40:57.646550 A crafted list can trigger a ArrayIndexOutOfBoundsException in Yauaa
HIGH (7.5)
Yet Another UserAgent Analyzer (Yauaa) is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an ArrayIndexOutOfBoundsException. If uncaught the exception will result in a program crash. Applications that do not use this feature are not affected. Users are advised to upgrade to version 7.9.0. Users unable to upgrade may catch and discard any ArrayIndexOutOfBoundsException thrown by the Yauaa library.
Published: 2022-12-08T21:19:30.227Z
Updated: 2025-04-23T16:31:10.928Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.