{"action":"Upgrade rgb2hex to 0.1.6 or later.","affected":[{"fixed":"0.1.6","introduced":"0"}],"component":"rgb2hex","cve_ids":["CVE-2018-25061"],"ecosystem":"npm","epss":0.00992,"exploited":false,"fixed_versions":["0.1.6"],"ghsa_id":"GHSA-7599-fqgm-v84p","id":"tcs_01M5KF8TMJ2G3R8FEC6ER38ZPQ","modified_at":"2023-11-08T04:00:15.837095Z","published_at":"2022-12-31T21:30:20Z","references":["https://osv.dev/vulnerability/GHSA-7599-fqgm-v84p","https://nvd.nist.gov/vuln/detail/CVE-2018-25061","https://github.com/christian-bromann/rgb2hex/commit/9e0c38594432edfa64136fdf7bb651835e17c34f","https://github.com/christian-bromann/rgb2hex","https://github.com/christian-bromann/rgb2hex/releases/tag/v0.1.6","https://vuldb.com/?ctiid.217151","https://vuldb.com/?id.217151"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7599-fqgm-v84p","url":"https://osv.dev/vulnerability/GHSA-7599-fqgm-v84p"}],"summary":"rgb2hex vulnerable to inefficient regular expression complexity"}