d3/d3-color · Security
d3-color vulnerable to ReDoS
- GHSA ID
- GHSA-36jr-mh4h-2g58
- Severity
- high
- Published
- Updated
Description
The d3-color module provides representations for various color spaces in the browser. Versions prior to 3.1.0 are vulnerable to a Regular expression Denial of Service. This issue has been patched in version 3.1.0. There are no known workarounds.
CWEs
- CWE-400 · Uncontrolled Resource Consumption
- CWE-1333 · Inefficient Regular Expression Complexity