Lucene search
AnonymousNODEJS:1701HistoryMay 10, 2021 - 6:48 p.m.
Regular Expression Denial of Service
2021-05-1018:48:49
Anonymous
www.npmjs.com
24
vulnerable
regular expression denial of service
dat.gui
recommendation
cve-2020-7755
github advisory
rgb
rgba
redos
craft
safe version
EPSS
0.001
Percentile
45.7%
Overview
All versions of package dat.gui are vulnerable to Regular Expression Denial of Service (ReDoS) via specifically crafted rgb and rgba values.
Recommendation
Avoid using dat.gui as there is no current safe version of this module
References
Related
github
github
Regular Expression Denial of Service in dat.gui
2021-05-10 18:44:38
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2020-10-14 06:25:14
osv
osv
Regular Expression Denial of Service in dat.gui
2021-05-10 18:44:38
prion
prion
Input validation
2020-10-27 18:15:00
nvd
nvd
CVE-2020-7755
2020-10-27 18:15:12
cve
cve
CVE-2020-7755
2020-10-27 18:15:12
cvelist
cvelist
CVE-2020-7755 Regular Expression Denial of Service (ReDoS)
2020-10-27 17:45:14