Regular Expression Denial of Service (ReDoS)

Overview d3-color is a Color spaces! RGB, HSL, Cubehelix, Lab and HCL Lch. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the rgb and hrc functions. PoC by Yeting Li: var d3Color = require"d3-color" // d3Color.rgb"rgb255,255,255" function...

UBUNTU-CVE-2019-7636

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDLGetRGB in video/SDLpixels.c...