color-string

2 known vulnerabilities.

Malicious versions reported for this package

MAL-2025-46973 — 2.1.1 · Sep 8, 2025

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2021-29060

Regular Expression Denial of Service (ReDOS)

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string.

color-string node-color-string node-color-string Debian Ubuntu npm

Jun 21, 2021