npm/d3-color: high
d3-color vulnerable to ReDoS
Action: Upgrade d3-color to 3.1.0 or later.
npm i d3-color@3.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.2 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: GHSA-36jr-mh4h-2g58
- https://github.com/d3/d3-color/pull/100
- https://github.com/d3/d3-color
- https://github.com/d3/d3-color/releases/tag/v3.1.0
- https://security.snyk.io/vuln/SNYK-JS-D3COLOR-1076592
published · modified · JSON