Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

d3-color vulnerable to ReDoS #162

Open
GustavWahl opened this issue Aug 26, 2024 · 0 comments
Open

d3-color vulnerable to ReDoS #162

GustavWahl opened this issue Aug 26, 2024 · 0 comments

Comments

@GustavWahl
Copy link

Hi, I noticed this vulnerability when doing npm audit; below is the output:

d3-color  <3.1.0
Severity: high
d3-color vulnerable to ReDoS - https://github.com/advisories/GHSA-36jr-mh4h-2g58
fix available via `npm audit fix --force`
Will install [email protected], which is a breaking change
node_modules/venn.js/node_modules/d3-color
  d3-interpolate  0.1.3 - 2.0.1
  Depends on vulnerable versions of d3-color
  node_modules/venn.js/node_modules/d3-interpolate
    d3-transition  0.0.7 - 2.0.0
    Depends on vulnerable versions of d3-color
    Depends on vulnerable versions of d3-interpolate
    node_modules/venn.js/node_modules/d3-transition
      venn.js  >=0.2.11
      Depends on vulnerable versions of d3-transition
      node_modules/venn.js

Is this something that will be fixed?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant