CVE-2021-29060

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string.

References

Affected packages

Git / github.com/qix-/color-string

Affected ranges

Type: GIT
Repo: https://github.com/qix-/color-string
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

0789e21284c33d89ebc4ab4ca6f759b9375ac9d3

Affected versions

0.*

0.3.0

0.4.0

1.*

1.0.0

1.0.1

1.1.0

1.1.1

1.2.0

1.3.0

1.3.1

1.4.0

1.5.0

1.5.1

1.5.2

1.5.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29060.json"