{"action":"Upgrade d3-color to 3.1.0 or later.","affected":[{"fixed":"3.1.0","introduced":"1.0.2"}],"component":"d3-color","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["3.1.0"],"ghsa_id":"GHSA-36jr-mh4h-2g58","id":"tcs_01M5KEW96N5WH0AEK17ZKY5Y7B","modified_at":"2026-09-10T03:49:55.734654222Z","published_at":"2022-09-29T14:12:55Z","references":["https://osv.dev/vulnerability/GHSA-36jr-mh4h-2g58","https://github.com/d3/d3-color/pull/100","https://github.com/d3/d3-color","https://github.com/d3/d3-color/releases/tag/v3.1.0","https://security.snyk.io/vuln/SNYK-JS-D3COLOR-1076592"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-36jr-mh4h-2g58","url":"https://osv.dev/vulnerability/GHSA-36jr-mh4h-2g58"}],"summary":"d3-color vulnerable to ReDoS"}