WS-2018-0106

All versions of rgb2hex are vulnerable to Regular Expression Denial of Service ReDoS when an attacker can pass in a specially crafted invalid color value...

EUVD-2022-7549

Malicious code in bioql PyPI...

CVE-2018-25061

A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 is able to address this issue. The...

Regular Expression Denial Of Service (ReDoS)

rgb2hex is vulnerable to regular expression denial of service ReDoS. The vulnerability exists in the rgb2hex function of index.js due to insufficient regular expression complexity which allows an attacker to cause an application crash...

svg-sketch-pdf (>=1.0.12, <=1.0.28) potentially affected by CVE-2018-25061 via rgb2hex (0.1.0)

rgb2hex NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on rgb2hex and may be impacted: - svg-sketch-pdf =1.0.12, =1.0.28 Source cves: CVE-2018-25061 Source advisory: OSV:GHSA-7599-FQGM-V84P...

rgb2hex vulnerable to inefficient regular expression complexity

A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 can address this issue. The name of...

GHSA-7599-FQGM-V84P rgb2hex vulnerable to inefficient regular expression complexity

A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 can address this issue. The name of...

CVE-2018-25061

A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 is able to address this issue. The...

CVE-2018-25061

A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 is able to address this issue. The...

Design/Logic Flaw

A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 is able to address this issue. The...

CVE-2018-25061 rgb2hex redos

A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 is able to address this issue. The...

CVE-2018-25061

CVE-2018-25061 affects rgb2hex up to 0.1.5, where an inefficient regular-expression pattern leads to a ReDoS risk. The vulnerability reportedly allows remote initiation and is addressed by upgrading to version 0.1.6. The patch is identified as 9e0c38594432edfa64136fdf7bb651835e17c34f. Multiple so...

CVE-2018-25061

A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 is able to address this issue. The...

rgb2hex 安全漏洞

rgb2hex is a lightweight rgb/rgba-to-hexadecimal parser from the personal developer Christian Bromann. A security vulnerability exists in rgb2hex version 0.1.5 and earlier. An attacker exploited the vulnerability to cause inefficient regular expression complexity...

CVE-2018-25061: Inefficient Regular Expression Complexity

A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1.6 is able to address this issue. The...

PT-2022-8071 · Rgb2Hex · Rgb2Hex

Name of the Vulnerable Software and Affected Versions: rgb2hex versions up to 0.1.5 Description: A vulnerability was found in the rgb2hex software, affecting some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely...

svg-sketch-pdf (>=1.0.12, <=1.0.28) potentially affected by unknown CVE via rgb2hex (0.1.0)

rgb2hex NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on rgb2hex and may be impacted: - svg-sketch-pdf =1.0.12, =1.0.28 Source cves: unknown CVE Source advisory: OSV:GHSA-65P8-3HM4-H9H8...

GHSA-65P8-3HM4-H9H8 Denial of Service in rgb2hex

All versions of rgb2hex are vulnerable to Regular Expression Denial of Service ReDoS when an attacker can pass in a specially crafted invalid color value. Recommendation Update to version 0.1.6 or later...

Denial of Service in rgb2hex

All versions of rgb2hex are vulnerable to Regular Expression Denial of Service ReDoS when an attacker can pass in a specially crafted invalid color value. Recommendation Update to version 0.1.6 or later...

PT-2019-20010

Name of the Vulnerable Software and Affected Versions rgb2hex versions prior to 0.1.6 Description The issue concerns a Regular Expression Denial of Service ReDoS that can occur when an attacker passes a specially crafted invalid color value. Recommendations Update to version 0.1.6 or later...