Colors.js

Source repositories

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2021-23567	Colors.js Project Colors.js	Hig	0.42	7.5	0.02		Jan 14, 2022	The package colors after 1.4.0 are vulnerable to Denial of Service (DoS) that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusable, other…

CVE-2021-23567HigJan 14, 2022
Colors.js Project
Colors.js
risk 0.42cvss 7.5epss 0.02
The package colors after 1.4.0 are vulnerable to Denial of Service (DoS) that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusable, other…