CVE-2018-20164

Name of the Vulnerable Software and Affected Versions: UA-Parser UAP-Core versions prior to 0.6.0

Description: A Regular Expression Denial of Service (ReDoS) issue allows remote attackers to overload a server by setting the User-Agent header in an HTTP(S) request to a value containing a long digit string.

Recommendations: For versions prior to 0.6.0, update to version 0.6.0 or later to resolve the issue. As a temporary workaround, consider restricting the length of the User-Agent header to prevent exploitation.