Lucene search
Veracode Vulnerability DatabaseVERACODE:29441HistoryFeb 19, 2021 - 4:06 a.m.
Regular Expression Denial Of Service (ReDoS)
2021-02-1904:06:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.003 Low
EPSS
Percentile
70.5%
three is vulnerable to regular expression denial of service. The usage of an insecure regex in setStyle function in color.js allows an attacker to cause excessive consumption of CPU resources, potentially resulting in an application crash.
Related
prion
prion
Design/Logic Flaw
2021-02-18 15:15:00
cve
cve
CVE-2020-28496
2021-02-18 15:15:13
ubuntucve
ubuntucve
CVE-2020-28496
2021-02-18 00:00:00
nodejs
nodejs
Regular Expression Denial of Service
2021-03-01 20:02:32
github
github
Denial of service in three
2021-03-01 19:57:16
cvelist
cvelist
CVE-2020-28496 Regular Expression Denial of Service (ReDoS)
2021-02-18 00:00:00
osv
osv
Denial of service in three
2021-03-01 19:57:16
nvd
nvd
CVE-2020-28496
2021-02-18 15:15:13
debiancve
debiancve
CVE-2020-28496
2021-02-18 15:15:13