~ / search / GHSA-chwr-hf3w-c984

GHSA-chwr-hf3w-c984

Regular Expression Denial of Service in dat.gui

Source: GitHub Advisory Database (reviewed) High CVE-2020-7755

Packages

EcosystemPackageAffectedFixed in
npm dat.gui <= 0.7.7 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package dat.gui are vulnerable to Regular Expression Denial of Service (ReDoS) via specifically crafted rgb and rgba values.

References

External links from the advisory. They lead to third-party sites.