GHSA-chwr-hf3w-c984

Suggest an improvement
Source
https://github.com/advisories/GHSA-chwr-hf3w-c984
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/05/GHSA-chwr-hf3w-c984/GHSA-chwr-hf3w-c984.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-chwr-hf3w-c984
Aliases
Published
2021-05-10T18:44:38Z
Modified
2026-09-10T03:49:14Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Regular Expression Denial of Service in dat.gui
Details

All versions of package dat.gui are vulnerable to Regular Expression Denial of Service (ReDoS) via specifically crafted rgb and rgba values.

Database specific 
{
    "cwe_ids": [
        "CWE-400"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2021-04-21T17:36:43Z",
    "nvd_published_at": "2020-10-27T18:15:00Z",
    "severity": "HIGH"
}
References

Affected packages

npm / dat.gui

Package

Name
dat.gui
View open source insights on deps.dev
Purl
pkg:npm/dat.gui

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
0.7.7

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/05/GHSA-chwr-hf3w-c984/GHSA-chwr-hf3w-c984.json"