CVE-2021-40892

2022-06-2414:15:07

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

JSON

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in validate-color v2.1.0 when handling crafted invalid rgb(a) strings.

CPENameOperatorVersion
validate-coloreq1.0.7
validate-coloreq1.0.8
validate-coloreq2.1.0
validate-coloreq2.0.0
validate-coloreq1.0.3
validate-coloreq1.0.4
validate-coloreq1.0.5
validate-coloreq1.0.6
validate-coloreq1.0.1
validate-coloreq1.0.2

Name	Operator	Version
validate-color	eq	1.0.7
validate-color	eq	1.0.8
validate-color	eq	2.1.0
validate-color	eq	2.0.0
validate-color	eq	1.0.3
validate-color	eq	1.0.4
validate-color	eq	1.0.5
validate-color	eq	1.0.6
validate-color	eq	1.0.1
validate-color	eq	1.0.2