CVE-2020-7755
Regular Expression Denial of Service in dat.gui
Résumé
Regular Expression Denial of Service in dat.gui
Description d'origine
La description telle que publiée par la source (souvent en anglais).
All versions of package dat.gui are vulnerable to Regular Expression Denial of Service (ReDoS) via specifically crafted rgb and rgba values.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
dat.gui
[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"0.7.7"}]}]
Références
- advisory nvd.nist.gov
- web github.com
- web github.com
- web snyk.io
- web npmjs.com