Описание
d3-color vulnerable to ReDoS
The d3-color module provides representations for various color spaces in the browser. Versions prior to 3.1.0 are vulnerable to a Regular expression Denial of Service. This issue has been patched in version 3.1.0. There are no known workarounds.
Пакеты
Наименование
d3-color
npm
Затронутые версииВерсия исправления
< 3.1.0
3.1.0
Дефекты
CWE-400
Дефекты
CWE-400