CVE-2020-28501

CVE-2020-28501 is a denial-of-service vulnerability affecting the es6-crawler-detect package prior to version 3.1.3, specifically within the crawlerdetect_project. This flaw arises from a lack of user agent string length limitation when supplied to regex operators, potentially leading to resource exhaustion. Rated with a CVSS score of 7.5 (HIGH), it is a network-exploitable vulnerability with low attack complexity, allowing an unauthenticated attacker to cause a denial of service. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.