Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-286p-vc9p-p5qv
  • npm/color-string
 color-string@2.1.1 contains malware after npm account takeover 15 Sep 2025
  • Fix available
  • Severity - 8.8 (High)
MAL-2025-46973
  • npm/color-string
 Malicious code in color-string (npm) 08 Sep 2025
  • No fix available
GHSA-257v-vj4p-3w2h
  • npm/color-string
 Regular Expression Denial of Service (ReDOS) 22 Jun 2021
  • Fix available
  • Severity - 5.3 (Medium)