Regular Expression Denial of Service (ReDoS)

Overview d3-color is a Color spaces! RGB, HSL, Cubehelix, Lab and HCL Lch. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the rgb and hrc functions. PoC by Yeting Li: var d3Color = require"d3-color" // d3Color.rgb"rgb255,255,255" function...