npm/rgb2hex: medium 6.5
Denial of Service in rgb2hex
Action: Upgrade rgb2hex to 0.1.6 or later.
npm i rgb2hex@0.1.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.6 | - |
Fixed versions
| 0.1.6 |
Sources
- osv: GHSA-65p8-3hm4-h9h8
- https://hackerone.com/reports/319629
- https://github.com/christian-bromann/rgb2hex/blob/v0.1.0/index.js#L25
- https://snyk.io/vuln/npm:rgb2hex:20180429
- https://www.npmjs.com/advisories/647
published · modified · JSON