{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.7.7"}],"component":"dat.gui","cve_ids":["CVE-2020-7755"],"ecosystem":"npm","epss":0.02099,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-chwr-hf3w-c984","id":"tcs_01M5KFJY1NY6BPP7SZVEK8T8KD","modified_at":"2026-09-10T03:49:14.655920560Z","published_at":"2021-05-10T18:44:38Z","references":["https://osv.dev/vulnerability/GHSA-chwr-hf3w-c984","https://nvd.nist.gov/vuln/detail/CVE-2020-7755","https://github.com/dataarts/dat.gui/issues/278","https://github.com/dataarts/dat.gui/pull/279","https://snyk.io/vuln/SNYK-JS-DATGUI-1016275","https://www.npmjs.com/package/dat.gui"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-chwr-hf3w-c984","url":"https://osv.dev/vulnerability/GHSA-chwr-hf3w-c984"}],"summary":"Regular Expression Denial of Service in dat.gui"}