Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade d3-color to v3.1.0 #3589

Closed
digitaleyes00 opened this issue Oct 6, 2022 · 1 comment
Closed

Upgrade d3-color to v3.1.0 #3589

digitaleyes00 opened this issue Oct 6, 2022 · 1 comment

Comments

@digitaleyes00
Copy link

Please upgrade d3-color to use version 3.1.0 in order to fix this vulnerability.

The d3-color module provides representations for various color spaces in the browser. Versions prior to 3.1.0 are vulnerable to a Regular expression Denial of Service. This issue has been patched in version 3.1.0. There are no known workarounds.
@Fil
Copy link
Member

Fil commented Oct 6, 2022

duplicate of d3/d3-color#100

@Fil Fil closed this as completed Oct 6, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@Fil @digitaleyes00