Description
All versions of rgb2hex are vulnerable to Regular Expression Denial of Service (ReDoS) when an attacker can pass in a specially crafted invalid color value.
Recommendation
Update the rgb2hex package to the latest compatible version. Followings are version details:
- Affected version(s): < 0.1.6
- Patched version(s): 0.1.6
References
Could your website be exposed too?
SmartScanner can check your website for Denial of Service in rgb2hex and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Denial of Service in mem - Vulnerability
- Axios: Excessive recursion in formDataToJSON can cause denial of service - Vulnerability
- mcp-data-vis vulnerable to denial of service via unsanitized `select` key lookup on `Object.prototype` with `precompile: - Vulnerability
- Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability - Vulnerability
You might also like:
See something that needs correcting? Let us knowUpdated January 09, 2023