Description
All versions of package dat.gui are vulnerable to Regular Expression Denial of Service (ReDoS) via specifically crafted rgb and rgba values.
Remediation
References
https://github.com/dataarts/dat.gui/issues/278
https://snyk.io/vuln/SNYK-JS-DATGUI-1016275
Related Vulnerabilities
CVE-2022-24827 Vulnerability in maven package com.yahoo.elide:elide-datastore-aggregation
CVE-2020-11987 Vulnerability in maven package org.apache.xmlgraphics:batik-svgbrowser
CVE-2023-24621 Vulnerability in maven package com.esotericsoftware.yamlbeans:yamlbeans
CVE-2021-21290 Vulnerability in maven package io.netty:netty-testsuite
CVE-2021-3223 Vulnerability in npm package node-red-dashboard