CVE-2021-29060
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string.
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for node-color-string in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string.
Check your installed stack and versions against the current vulnerability feeds.