Description
This affects the package three before 0.125.0. This can happen when handling rgb or hsl colors.
PoC:
Recommendation
Update the three package to the latest compatible version. Followings are version details:
- Affected version(s): < 0.125.0
- Patched version(s): 0.125.0
References
Could your website be exposed too?
SmartScanner can check your website for Denial of service in three and gives you actionable findings to investigate.
Start a free scanRelated Issues
- glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex - CVE-2020-28469
- is_js vulnerable to Regular Expression Denial of Service - CVE-2020-26302
- Regular Expression Denial of Service in djvalidator - CVE-2020-7779
- Denial of Service (DoS) via the unsetByPath function in jsjoints - CVE-2020-28479
You might also like:
See something that needs correcting? Let us knowUpdated September 11, 2023


