Skip to content
OpenAdvisories

Package · npm

rgb2hex

2 known vulnerabilities.

2 results · Feed

  • Medium 4.3

    rgb2hex redos

    A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1…

  • Medium 6.5

    Denial of Service in rgb2hex

    All versions of `rgb2hex` are vulnerable to Regular Expression Denial of Service (ReDoS) when an attacker can pass in a specially crafted invalid color value. ## Recommendation Update to version 0.1.6 or later.