Regular Expression Denial Of Service (ReDoS)

color-string is vulnerable to regular expression denial of service. The vulnerability exists due to the quadratic worst-case time complexity of regular expressions in cs.get.hsl and cs.get.hwb functions in index.js when a string has more than 5000 characters, allowing a malicious user to cause an...