CVE-2021-23567
1 advisory.
npm/colors CVE-2021-23567: high 7.5
Infinite Loop in colors.js
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.1 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-gh88-3pxp-6fm8
- https://nvd.nist.gov/vuln/detail/CVE-2021-23567
- https://github.com/Marak/colors.js/issues/285
- https://github.com/Marak/colors.js/issues/285%23issuecomment-1008212640
- https://github.com/Marak/colors.js/commit/074a0f8ed0c31c35d13d28632bd8a049ff136fb6%23diff-92bbac9a308cd5fcf9db165841f2d90ce981baddcb2b1e26cfff170929af3bd1R18
- https://github.com/Marak/colors.js
- https://snyk.io/blog/open-source-maintainer-pulls-the-plug-on-npm-packages-colors-and-faker-now-what
- https://snyk.io/vuln/SNYK-JS-COLORS-2331906
CVE-2021-23567 · published · modified · JSON